Tech Risk and Controls

J.P. Morgan; New York (NY); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health care coverage

On-site health and wellness centers

Retirement savings plan

Tuition reimbursement

Mental health support

Job summary

JPMorganChase is seeking an Assessments & Exercises Senior Associate to support end-to-end PCI assessments within the Cybersecurity Technology Controls Global Regulatory Assessments team. You will work with external assessors and internal owners to ensure PCI DSS adherence while growing technical depth and professional judgment in a fast-paced environment.

You will gain exposure to senior assessors and stakeholders, leveraging automation tools to organize evidence, map requirements, and draft

Qualifications

• 3+ years in technology risk and controls, cybersecurity consulting, audit, or compliance assessments with hands-on PCI DSS exposure.
• Strong analytical, time management, and prioritization skills for complex compliance matters.
• Effective written and verbal communication to diverse audiences including non-technical partners.

Responsibilities

• Support and manage multiple PCI assessments with adherence to methodology and timelines.
• Review PCI documentation to meet PCI DSS SSC requirements and provide professional judgment on technical/compliance matters.
• Prepare for assessment walkthroughs, organize evidence, and track actions for senior assessors.
• Guide remediation activities, action plans, and closure verification for assigned business areas.
• Research PCI requirements and industry developments; share informed perspectives with the team.
• Maintain remediation tracking and escalate delays; participate in team quality reviews.

Education

Bachelor's degree in Computer Science, MIS, or related field

Job description

Your expertise in cybersecurity compliance can make a real impact — not just for a team, but for one of the world's most complex and consequential financial institutions. At JPMorganChase, we invest in our people, our technology, and our controls to stay ahead of an ever-evolving threat landscape. This is your opportunity to grow your career at the intersection of regulatory compliance, emerging technology, and enterprise-scale risk management.

As an Assessments & Exercises Senior Associate at JPMorganChase within the Cybersecurity Technology Controls Global Regulatory Assessments team, you will play a hands‑on role in supporting end-to‑end Payment Card Industry (PCI) compliance assessments that directly support the firm's multi‑level PCI compliance validation efforts. You will collaborate with external assessor partners and internal control and application owners to ensure adherence to PCI Data Security Standard (PCI DSS) frameworks, while developing your technical depth and professional judgment in a high‑impact, fast‑paced environment. This role offers meaningful exposure to senior assessors, cross‑functional stakeholders, and emerging automation tools — positioning you for continued growth within the firm's cybersecurity organization.

Job responsibilities

• Support and collaborate on multiple concurrent PCI assessments, adhering to established methodology, firm standards, and time‑sensitive milestones through effective project management and stakeholder coordination
• Capture, review, and analyze PCI‑required documentation, ensuring quality and suitability that meets PCI Security Standards Council (SSC) requirements while exercising professional judgment on complex technical and compliance matters
• Prepare for assessment walkthroughs, organize evidence, document discussions, and track follow‑up actions in support of Vice Presidents and senior assessors throughout the assessment lifecycle; monitor key risk parameters to proactively identify non‑compliance and assist in remediation efforts, including the evaluation of potential compensating controls to address security, risk, and control gaps
• Provide guidance on remediation activities for assigned business areas, supporting appropriate resolution of issues, action plans, and closure verification processes
• Research PCI requirements, emerging guidance, and industry developments; synthesize findings and share informed perspectives with the broader assessment team
• Maintain remediation tracking by managing action items, following up with stakeholders, validating submitted documentation, and escalating delays or concerns to the assessment lead; participate in team quality reviews, incorporate feedback, and progressively take ownership of defined assessment activities as knowledge and experience develop
• Leverage approved automation and large language model (LLM) tools to assist with evidence organization, requirement mapping, workpaper drafting, quality checks, and reporting — while validating outputs and safeguarding sensitive information
• Support the testing of controlled agentic workflows for repetitive administrative and assessment‑support tasks, contributing feedback on accuracy, usability, risks, and improvement opportunities

Required qualifications, capabilities, and skills

• Formal training or certification on assessments & exercises concepts and 3+ years applied experience
• 3+ years of professional experience in technology risk and controls, cybersecurity consulting, audit, or compliance assessments, with hands‑on exposure to PCI DSS
• Bachelor's degree in Computer Science, Management Information Systems, Accounting Information Systems, or a related field
• Comprehensive knowledge and practical experience across technology infrastructure domains and PCI DSS requirements
• Strong analytical, decision‑making, time management, and prioritization capabilities with a detail‑oriented approach to complex compliance matters
• Effective oral and written communication skills, with the ability to articulate complex technical concepts to diverse audiences including non‑technical business partners
• Demonstrated ability to plan, coordinate, and execute across teams and functions to deliver quality outcomes within established timeframes
• Proven aptitude for upskilling and adopting new technologies in response to evolving business and regulatory requirements

Preferred qualifications, capabilities, and skills

• Experience working with a Qualified Security Assessor (QSA) firm or cybersecurity consulting organization
• Proficiency in reviewing and evaluating technical and software documentation to assess control suitability and compliance alignment
• Experience operating in heavily governed environments subject to compliance, regulatory, or risk‑reduction controls, preferably within financial services
• Working knowledge of IT risk and process frameworks such as COSO, COBIT, NIST Cybersecurity Framework, or ITIL
• Familiarity with process‑focused methodologies for IT activities including Change Management, Incident Management, and the Software Development Lifecycle (SDLC)
• Demonstrated interest and practical application of artificial intelligence, automation, or emerging technologies to enhance compliance and assessment processes

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission‑based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on‑site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success. Lead PCI DSS assessments, partner with assessors, and strengthen the firm's cybersecurity controls.