Tech Risk Assurance Lead

JPMorgan Chase & Co.; Plano (TX); On-site; USD 150,000 - 230,000; Full time

Job summary

JPMorgan Chase & Co. is seeking an experienced Tech Risk Assurance Lead to mitigate technology risks and uphold operational excellence in Cybersecurity Technology & Controls.

The role focuses on identifying, assessing, and managing cyber and tech risks across firmwide systems, aligning with risk and regulatory standards. You will collaborate with cross-product teams, monitor evolving threats, and develop risk reporting frameworks to provide leadership with clear, data-driven insights into the

Qualifications

• Formal training or certification in tech risk assurance concepts and 5+ years of applied experience.
• Experience identifying, assessing, and managing technology and cyber risks in a large organization.
• Knowledge of AI risk governance and data security, including AI threats and mitigations.
• Familiarity with technology risk frameworks and risk management methodologies (NIST, ISO 27001, COBIT).
• Ability to translate risk findings into clear business impact.

Responsibilities

• Lead end-to-end technology risk assessments across systems and platforms and drive remediation strategies.
• Evaluate the design and operation of technology controls for compliance with standards.
• Partner with cross-functional teams to embed consistent risk practices and accountability.
• Develop risk reporting frameworks for leadership with data-driven insights.
• Monitor emerging threats and regulatory developments; translate findings into mitigation plans.
• Facilitate risk governance activities including committee preparation and escalation.
• Drive continuous improvement of the technology risk and controls program.
• Collaborate with audit, compliance, and second-line risk teams during examinations.

Skills

Tech risk governance

NIST, ISO 27001, COBIT

Risk assessments

Regulatory engagement

Data security

AI risk governance

Communication skills

Analytical skills

Education

CRISC certification

CISM

CISSP

Job description

Job Description

Join our team to play a pivotal role in mitigating technology risks and upholding operational excellence, driving innovation in risk management.

As a Tech Risk Assurance Lead at JPMorgan Chase within Cybersecurity Technology & Controls, you will help ensure the security and resilience of our systems and data. You will focus on the identification, analysis, and management of technology and cyber operational risks firmwide, leveraging your expertise in technology risk and controls to identify, assess, and manage risks across systems, evaluate control effectiveness, and ensure alignment with risk and regulatory standards. This role offers an exciting opportunity to collaborate with cross-product and functional teams, stay abreast of the latest developments in technology, and implement innovative solutions that enhance the organization's risk posture.

Job responsibilities

• Lead end-to-end technology risk assessments across systems and platforms, identifying risks and driving actionable remediation strategies
• Evaluate the design and operational effectiveness of technology controls, ensuring alignment with internal standards and regulatory requirements
• Partner with cross-functional and cross-product teams to embed consistent risk management practices and foster a culture of shared accountability
• Develop and maintain risk reporting frameworks that provide leadership with clear, data-driven insights into the firm's technology risk posture
• Monitor emerging technology threats and evolving regulatory developments, translating findings into proactive risk mitigation strategies
• Facilitate risk governance activities including risk committee preparation, issue tracking, and escalation management
• Drive continuous improvement initiatives that strengthen the effectiveness and efficiency of the technology risk and controls program
• Collaborate with audit, compliance, and second-line risk teams to support regulatory examinations and internal reviews
  

Required qualifications, capabilities, and skills

• Formal training or certification on tech risk assurance concepts and 5+ years applied experience
• Demonstrated experience identifying, assessing, and managing technology and cyber operational risks within a large, complex organization
• Technical proficiency in AI risk governance and data security, securing platforms, applications, and business processes with understanding of AI threats, mitigations, and defense mechanisms
• Strong knowledge of technology control frameworks and risk management methodologies (e.g., NIST, ISO 27001, COBIT)
• Proven ability to evaluate control effectiveness and translate technical risk findings into clear business impact narratives
• Experience engaging with regulatory requirements and supporting audit or examination activities
• Strong analytical and problem-solving skills with the ability to manage multiple priorities in a fast-paced environment
• Excellent written and verbal communication skills, with the ability to present complex risk topics to both technical and non-technical stakeholders
  

Preferred qualifications, capabilities, and skills

• Industry certifications such as CRISC, CISM, CISSP, or equivalent
• Experience working within financial services or a highly regulated industry
• Familiarity with cloud security risk management and emerging technology risk domains
• Prior experience supporting regulatory engagements or technology risk governance programs
• Knowledge of cybersecurity operations, threat intelligence, or vulnerability management practices

#CTC