Technology Risk and Controls [Multiple Positions Available]

JPMorganChase; Jersey City (NJ); On-site; USD 178,000 - 200,000; Full time

Benefits offered by this job

Health benefits

Job summary

JPMorganChase is seeking a Technology Risk Manager to develop and implement risk strategies across public cloud environments and regulatory programs. You will lead cross-functional teams, drive risk assessments, and provide expert counsel to regulators and auditors.

The role emphasizes escalation of emerging technology risks, governance of controls, and collaboration with internal and external stakeholders in a fast-paced financial services environment.

Qualifications

• Master’s or Bachelor’s degree in Cybersecurity, Information Security, Computer Science or related field with required experience.
• Three (3) years of experience in technology risk and controls or related occupation.
• Experience collaborating on cross-functional risk projects and reporting to regulators.

Responsibilities

• Develop and implement technology risk management strategies and processes.
• Lead governance of controls, issue management, and risk reporting for senior leaders.
• Escalate emerging technology risks using firm-wide risk management tools.
• Advise stakeholders on security obligations and regulatory expectations.

Skills

Cross-functional risk planning

Governance & controls

Cloud security frameworks

Risk assessment & reporting

Regulatory engagement

Education

Master's degree in Cybersecurity/Info Security/CS/CE

Bachelor's degree in Cybersecurity/Info Security/CS/CE

Tools

AWS

Azure

GCP

NIST CSF

NIST SP 800-53

ISO/IEC 27001

SOC 2

Job description

Job Description

Duties: Develop and implement technology risk management strategies, policies, and processes to identify, assess, and mitigate risks. Drive strategic projects and initiatives to enhance the firm's technology risk management capabilities, in line with industry best practices, and the firm's standards and regulatory requirements. Establish and maintain strong relationships with internal and external stakeholders, including key cross- functional team leads, regulators, and auditors, to ensure compliance with legal, regulatory, and industry standards for public cloud environment by delivering timely responses and complying with stipulated deadlines. Conduct root cause analysis to identify the underlying causes and themes of issues and incidents, developing actionable insights and recommendations to address these root causes and prevent recurrence. Manage reporting and governance of overall controls, policies, issue management, and measurements, providing insight to senior leaders into the effectiveness of controls and inform governance work. Oversee a cross-functional team to identify and **escalate** emerging and upstream technology risks through execution of the firm's management framework tools, including risk event management, reporting, and action plan tracking, and provide expert counsel to stakeholders and constituents regarding their security obligations, facilitating acceptable outcomes.

Description

Job Description

Duties: Develop and implement technology risk management strategies, policies, and processes to identify, assess, and mitigate risks. Drive strategic projects and initiatives to enhance the firm's technology risk management capabilities, in line with industry best practices, and the firm's standards and regulatory requirements. Establish and maintain strong relationships with internal and external stakeholders, including key cross- functional team leads, regulators, and auditors, to ensure compliance with legal, regulatory, and industry standards for public cloud environment by delivering timely responses and complying with stipulated deadlines. Conduct root cause analysis to identify the underlying causes and themes of issues and incidents, developing actionable insights and recommendations to address these root causes and prevent recurrence. Manage reporting and governance of overall controls, policies, issue management, and measurements, providing insight to senior leaders into the effectiveness of controls and inform governance work. Oversee a cross-functional team to identify and **escalate** emerging and upstream technology risks through execution of the firm's management framework tools, including risk event management, reporting, and action plan tracking, and provide expert counsel to stakeholders and constituents regarding their security obligations, facilitating acceptable outcomes.

Qualifications

Minimum education and experience required: Master's degree in Cybersecurity, Information Security, Computer Science, Computer Engineering, or related field of study plus 3 years of experience in the job offered or as Technology Risk and Controls or related occupation. The employer will alternatively accept a Bachelor's degree in Cybersecurity, Information Security, Computer Science, Computer Engineering, or related field of study plus 5 years of experience in the job offered or as Technology Risk and Controls or related occupation.

Skills Required: This position requires three (3) years of experience with the following: Collaborating with teams on cross- functional projects involving strategic planning and multistakeholder alignment in risk assessment and reporting; Providing oversight, control evaluation, design, and governance across product lines, implementing effective risk mitigation strategies within the cloud and cybersecurity domain in multi- year projects; Leveraging cybersecurity standards and frameworks including STRIDE, MITRE, and FAIR in cloud security concepts including technology risk management and information security, with risk identification, assessment, and mitigation; Applying risk frameworks and tooling aligned to common cybersecurity standards including NIST CSF, NIST SP 800-53, ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 27017, ISO/IEC 27018, SOC2, CIS Controls, PCI DSS, PDPA, PCPD, and financial industry regulatory requirements; Performing risk assessments, control evaluations, or security analysis with public cloud platforms such as Amazon Web Services, Microsoft Azure, or Google Cloud Platform; Advising, providing responses, and reporting to financial regulators on matters related to adopting cloud technology in the financial services environment within the banking and securities sectors for APAC, NA, and EMEA locations including adhering to the cloud standards of each country's financial regulatory authority including MAS, OJK, HKMA, FCC, PRA, FFIEC, OCC, FRB, and RBI.

Job Location: 575 Washington Blvd, Jersey City, NJ 07310.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set, and location. For those in eligible roles, discretionary incentive compensation which may be awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process. In addition, please visit: https://careers.jpmorgan.com/us/en/about-us.

Full-Time. Salary: $177,500.00-$200,000.00 per year.

About Us

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success.

We are an equal opportunity employer and place a high value on diversity and inclusion at our company.

We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law.

We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.

Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans.

About The Team

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.