Tech Risk and Controls - Infrastructure Platforms

Testing Site - JPMC; Columbus (OH); On-site; USD 120,000 - 160,000; Full time

Job summary

JPMorganChase in Columbus, OH, invites applications for a Technology Risk & Controls Lead. You will drive oversight and execution of the technology risk and control environment for Data and Specialty Services, guiding process owners and partnering with control managers to deliver a clear view of risk posture.

This role requires strong judgment, collaboration, and the ability to translate risk insights into business outcomes, with extensive experience in risk assessment, governance, and

Qualifications

• Formal training or certification on risk management, technology controls, cybersecurity, or related concepts.
• 5+ years of applied experience in technology risk management, information security, or related field.
• Experience applying risk management frameworks, industry standards, and financial services regulatory expectations.
• Ability to influence senior stakeholders and translate technology risk insights into business outcomes.
• Strong written and verbal communication for leadership audiences.
• Experience supporting audits and regulatory examinations.

Responsibilities

• Identify, assess, quantify, and communicate technology risks with remediation recommendations
• Partner with technology leaders to drive consistent execution of risk management processes
• Execute control governance activities, including policy adherence and issue management
• Monitor control effectiveness, identify gaps, and recommend improvements
• Lead audit and regulatory exam engagement activities, including evidence coordination
• Prepare governance materials communicating the state of the control environment to senior stakeholders
• Investigate metrics, triggers, and alerts indicating potential control issues
• Review standards against regulatory expectations and industry practices
• Build relationships across teams to enable cross-functional delivery against risk objectives
• Maintain risk and control documentation within governance tooling and taxonomies

Skills

Risk management frameworks

Stakeholder influence

Governance & reporting

Audits & regulatory support

Communication skills

Tools

ServiceNow

Job description

Join a team where your expertise helps protect critical infrastructure and enable innovation at scale. You will help shape how we identify, manage, and report technology risk while partnering closely with stakeholders across technology and control functions. You will work in a dynamic environment where strong judgment, collaboration, and a continuous-improvement mindset are valued.

As a Technology Risk & Controls Lead at JPMorganChase within Enterprise Technology and Infrastructure Platforms, you will drive the oversight and execution of the technology risk and control environment for Data and Specialty Services. You will provide guidance to technology-aligned process owners, evaluate control design and effectiveness, and partner with control managers and other stakeholders to deliver a clear view of technology risk posture and its impact to the business.

Job responsibilities

• Identify, assess, quantify, and communicate technology risks, including root cause analysis and actionable remediation recommendations
• Partner with technology leaders and control partners to drive consistent execution of technology risk management processes
• Execute control governance activities, including policy adherence, issue management, and control performance measurement
• Monitor control effectiveness, identify gaps, and recommend enhancements to strengthen compliance and risk posture
• Lead audit and regulatory exam engagement activities, including evidence coordination and response management
• Prepare recurring governance materials that communicate the state of the control environment to senior stakeholders
• Investigate and respond to metrics, triggers, and alerts that indicate potential control issues, including findings and exceptions
• Review standards and controls against regulatory expectations and industry practices and recommend improvements
• Build trusted relationships across teams to enable cross-functional delivery against shared risk objectives
• Maintain risk and control documentation and structure within required governance tooling and taxonomies

Required qualifications, capabilities, and skills

• Formal training or certification on risk management, technology controls, cybersecurity, or related concepts and 5+ years of applied experience in technology risk management, information security, or a related field
• Experience applying risk management frameworks, industry standards, and financial services regulatory expectations
• Demonstrated expertise in risk assessment and reporting, control evaluation, control design, and governance
• Proven ability to influence senior stakeholders and translate technology risk insights into business-focused outcomes
• Strong written and verbal communication skills, including the ability to create clear governance materials for leadership audiences
• Experience supporting audits and/or regulatory examinations, including issue response and evidence management
• Ability to manage multiple priorities while maintaining high standards for quality, timeliness, and attention to detail

Preferred qualifications, capabilities, and skills

• Understanding of enterprise risk management practices in a technology environment
• Knowledge of financial services regulations and how they apply to technology risk and controls
• Working knowledge of infrastructure and platform technologies (for example: networking, Linux, cloud platforms, third-party SaaS, architecture, or engineering practices)
• Experience using ServiceNow for risk, controls, issues, or workflow management
• Industry certifications such as CISM, CRISC, CISSP, or equivalent