Vulnerability Governance Lead, Tech Risk & Controls

JPMorgan Chase & Co.; Jersey City (NJ); On-site; USD 140,000 - 190,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Tech Risk and Controls Lead to drive enterprise governance of vulnerability management.

You will coordinate across Product, Engineering, Operations, Risk Intelligence, and control design teams to ensure consistent oversight and accountability. The role emphasizes defining governance mechanisms, escalation paths, and performance metrics to strengthen discovery and remediation across cloud, data centers, and endpoints.

Qualifications

• 10+ years of experience in cybersecurity, technology risk, or governance.
• Experience leading enterprise vulnerability management governance or cross-functional oversight.
• Deep understanding of the vulnerability management lifecycle and controls.
• Ability to define decision rights, governance forums, and metric frameworks.
• Experience governing complex security ecosystems across tools and platforms.

Responsibilities

• Lead the enterprise Vulnerability Management governance function as a central coordination point across teams.
• Establish and maintain the governance charter, operating model, and escalation pathways.
• Coordinate across Product, Engineering, Operations, Risk, Standards and Control Design, and business units.
• Chair or coordinate governance forums ensuring evidence and timely decisions.
• Govern changes to discovery, coverage, feeds, scoring, and exemptions with impact assessments.
• Drive root-cause and thematic analysis of vulnerabilities and control failures.
• Define enterprise metrics and reporting on discovery, coverage, and remediation outcomes.
• Coordinate with Audit, Compliance, and regulatory teams for coherent explanations of scope and decisions.
• Promote automation and auditable governance patterns for timely decisions.

Skills

Governance leadership

Cybersecurity risk management

Stakeholder management

Executive communication

Analytics & metrics

Root-cause analysis

Job description

JPMorgan Chase & Co. is seeking a Tech Risk and Controls Lead to drive enterprise governance of vulnerability management.

You will coordinate across Product, Engineering, Operations, Risk Intelligence, and control design teams to ensure consistent oversight and accountability. The role emphasizes defining governance mechanisms, escalation paths, and performance metrics to strengthen discovery and remediation across cloud, data centers, and endpoints.