Tech Risk and Controls Lead - Tech Resiliency Testing

JPMorgan Chase & Co.; Plano (TX); On-site; USD 150,000 - 230,000; Full time

Job summary

JPMorgan Chase & Co. in Plano, TX seeks a Tech Risk & Controls Lead to identify and mitigate technology risks across datacenter and cloud estates, with a focus on AI-enabled controls and regulatory alignment.

You will guide process owners, partner with Cybersecurity and Regulators, and drive resiliency testing and reporting to senior leadership, enabling risk-informed decisions and resilient operations.

Qualifications

• 5+ years of experience in technology risk management or cybersecurity.
• Experience applying AI-enabled processes for risk reporting and governance.
• Ability to validate AI-generated risk insights and ensure regulatory alignment.

Responsibilities

• Identify, mitigate compliance and operational risks in line with firm standards.
• Provide SME guidance to process owners on controls and regulatory requirements.
• Coordinate with Product Owners, Business Control Managers, and Regulators.
• Own planning, execution, and closure of resiliency tests across environments.
• Drive AI-enabled risk management, automation, and evidence generation.
• Report on risk posture to senior management with actionable insights.

Skills

Technology risk management

Cybersecurity

Regulatory compliance

AI capabilities

Job description

Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management.

As a Tech Risk & Controls Lead within the Infrastructure Platforms (IP) team, you will be responsible for identifying, and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards. By partnering with various stakeholders, including Product Owners, Business Control Managers, and Regulators, you will contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business. Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape.

Within IP, you will lead Technology Resiliency testing across the firm's datacenter and cloud estate worldwide. You will own the planning, execution and closure of resiliency events. You will represent IP for Technology Resiliency, partnering closely with lines of business and Cybersecurity and Technology Controls, and help keep improving our Resiliency Operating Framework in line with firmwide and regulatory obligations. AI is central to how this role operates. We are looking for a leader who defaults to AI-assisted ways of working: automating manual effort, speeding up documentation, mining test and incident data for insight, and raising the quality and speed of every process the team owns. This role requires flexibility to work weekends, on average once a month, as many resiliency events are scheduled outside business hours.

Job responsibilities

• Own the end-to-end lifecycle of datacenter and cloud resiliency test events, from scoping against current compliance status and building the execution schedule to preparing run-books and managing deliverables such as change records and the testing timetable
• Uses enterprise-authorized AI capabilities within the work environment to accelerate synthesis of risk/control evidence and draft executive-ready reporting, validating outputs and handling data according to sensitivity and security requirements
• Lead live test execution on behalf of IP, running the command center, securing participation from all stakeholders and keeping business partners and senior management informed throughout
• Identify, quantify and communicate resiliency risk through post-test and post-incident analysis, evaluating successful and failed recoveries, performing root cause analysis, and driving re-tests or corrective actions through to closure
• Champion practical AI adoption across the team, using LLM tools such as Claude and AI-assisted development environments such as VS Code to automate manual effort, accelerate run-book and documentation production, and reduce touchpoints during failover and recovery events
• Promotes reuse-first, AI-assisted approaches to streamline recurring control testing and issue/action-plan management routines, ensuring human review and alignment to auditability and regulatory expectations
• Apply AI to analyze test results, incident history and compliance data at scale, surfacing recurring failure modes and remediation priorities, and embed reusable prompts and patterns into the team's operating model while coaching colleagues on effective, responsible use
• Drive the resiliency roadmap across public and private cloud and cyber resiliency controls, using AWS services to design, test and evidence multi-region, multi-availability-zone and hybrid datacenter-to-cloud recovery
• Monitor and evaluate the effectiveness of resiliency controls against Firmwide Business Resilience standards, including Technology Recovery Action Plans (TRAP) for cyber and data-loss scenarios, identifying gaps and recommending enhancements
• Execute reporting and governance of test compliance, controls and issue management, giving senior management regular insight into risks, exceptions, requests not to test and escalations
• Develop and maintain trusted relationships with application and product owners, LOB technologists, Cybersecurity and Technology Controls, and Firmwide Business Resilience partners to drive alignment on resiliency outcomes

Required qualifications, capabilities, and skills

• 5+ years of experience or equivalent expertise in technology risk management, cybersecurity, or a related field, with a focus on regulatory compliance and risk mitigation
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support technology risk and controls workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted risk summaries and recommendations before use, escalating when uncertain and ensuring outcomes align to sec