Tech Risk & Controls Lead: Security Configuration Management

JPMorgan Chase & Co.; Columbus (OH); On-site; USD 140,000 - 190,000; Full time

Job summary

JPMorgan Chase & Co. seeks a Tech Risk & Controls Lead to govern Security Configuration Management across cloud and on-prem environments, aligning with standards and regulatory requirements.

The role blends deep control design with architectural oversight to improve operational controls and governance. The position focuses on defining control objectives, integrating AI-assisted analytics, and driving continuous improvements across Cyber domains in a hybrid ecosystem.

Qualifications

• Cloud certifications such as AWS Solutions Architect, CISSP, CISM, or GIAC.
• Experience designing metrics and governance for Security Configuration Management, SOC, network security, or endpoint control domains.
• Strong working knowledge of GRC tools like Archer, infrastructure as code, and control enforcement in dynamic and hybrid environments.

Responsibilities

• Lead development of technical control objectives and standards for Security Configuration Management and other Cyber domains.
• Leverage enterprise AI capabilities to accelerate cybersecurity architecture analysis and decisioning with data sensitivity in mind.
• Define measurable performance metrics and integrate telemetry and automation into governance dashboards.
• Drive AI-assisted risk summaries and executive-ready reporting with proper validation and auditability.

Skills

Cloud Certifications

GRC tooling

AI-assisted risk workflows

Metrics & governance design

Security controls architecture

Tools

Archer

Infrastructure as Code

Evolven

Puppet

Chef

Wiz

Job description

JPMorgan Chase & Co. seeks a Tech Risk & Controls Lead to govern Security Configuration Management across cloud and on-prem environments, aligning with standards and regulatory requirements.

The role blends deep control design with architectural oversight to improve operational controls and governance. The position focuses on defining control objectives, integrating AI-assisted analytics, and driving continuous improvements across Cyber domains in a hybrid ecosystem.