Tech Risk & Controls Lead: SOC/ISAE Attestation Expert

J.P. Morgan; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

JPMorganChase in New York is seeking a Tech Risk & Controls Lead to design and operate technology general and application controls across multiple lines of business, partnering with product owners, auditors, regulators and control teams to strengthen the firm’s risk posture.

You will drive testing, risk reporting and governance, lead cross-functional teams, and advance AI-assisted approaches to risk evidence while ensuring audit readiness and regulatory alignment.

Qualifications

• 5+ years of experience in IT controls attestation audits, including SOC/SOX audits.
• Exceptional issue management, exceptions analysis and problem solving skills.
• Experience using enterprise AI capabilities to support risk/workflows with strong validation habits and awareness of data sensitivity.
• Proficient knowledge in data security, risk assessment, reporting, control evaluation, design and governance.

Responsibilities

• Identify, quantify, communicate and manage technology risk with root cause analysis.
• Develop relationships with LOB technologists, assessment teams and data officers.
• Lead readiness assessments for controls and governance to avoid external audit impacts.
• Coordinate with external auditors to meet regulatory requirements; lead SOC-attestation development.
• Oversee remediation and drive timely control issue resolution.
• Promote AI-assisted approaches to streamline testing and reporting with human review.

Skills

IT Controls attestation audits

SOC/SOX audits

Risk management and governance

Communication with auditors & StakeHld

Education

Certifications: CPA, CISA, CISM, CRISC, CISSP

Job description

JPMorganChase in New York is seeking a Tech Risk & Controls Lead to design and operate technology general and application controls across multiple lines of business, partnering with product owners, auditors, regulators and control teams to strengthen the firm’s risk posture.

You will drive testing, risk reporting and governance, lead cross-functional teams, and advance AI-assisted approaches to risk evidence while ensuring audit readiness and regulatory alignment.