What are the responsibilities and job description for the Cloud Tech Risk and Controls Senior Associate position at JPMorgan Chase?
Join our dynamic team to navigate complex risk landscapes and fortify technology governance, making a pivotal impact in our firm's robust risk strategy.
As a Tech Risk & Controls Senior Associate in Enterprise Technology Cloud Foundational Services, you will contribute to the successful management of technology-aligned aspects of Governance, Risk, and Compliance in line with the firm's standards. Leverage your broad knowledge in risk management principles and practices to assess and monitor risks and implement effective controls. Your role in risk identification, control evaluation, and security governance is crucial in advising on complex situations and enhancing the firm’s risk posture. Through collaboration and analytical skills, you will contribute to the overall success of the Technology Risk & Services team and ensure compliance with regulatory obligations and industry standards.
Job responsibilities
- Assess and monitor technology risks, ensuring compliance with firm standards, regulatory requirements, and industry best practices
- Collaborate with stakeholders to develop and implement risk mitigation strategies, controls, and action plans for technology-aligned processes
- Monitor and evaluate the effectiveness of implemented controls, contribute to the recommendations for improvements and addressing gaps in risk management
- Communicate risk-related findings and updates to relevant stakeholders, ensuring alignment with organizational objectives and risk appetite
- Proactively monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance
- Support team on periodic audit readiness, regulatory assessments, and exam management.
- Work closely with Azure Engineering and Product Security teams to identify and validate security and controls requirements through testing and evidencing Azure policies.
- Deliver periodic departmental Key Performance Indicators (KPI) and Key Risk Indicators (KRI) metric tracking and timely reporting, highlighting successes and delivery risk acceptance and risk mitigation strategies.
- Assess Cloud Security Control Design adherence to the industry standards and local policy and regulations.
- Facilitate communication between all stakeholders to ensure that work is prioritized appropriately to meet business objectives, managing competing priorities of Cloud Tech Risk and Controls
Required qualifications, capabilities, and skills
- 3 years of experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on risk identification, assessment, and mitigation
- Experience in risk identification, assessment, and control evaluation, with a strong understanding of industry standards
- Demonstrated ability to analyze complex issues, develop and implement risk mitigation strategies, and communicate effectively with senior stakeholders
- Proficient knowledge of risk management frameworks, regulations, and industry best practices
- 5 years in evaluating technology risk and controls management
- Intermediate skill level in (Microsoft Excel, PowerPoint, Word, SharePoint, Confluence, and JIRA)
- Excellent communication skills and team collaboration skills
Preferred qualifications, capabilities, and skills
- CISM, CRISC, CISSP, or other industry-recognized risk certifications
- Microsoft Azure Fundamentals, AWS Cloud Practitioner or any similar Cloud certification
- Experience with centralized policy and standard searching tools (CORE, Archer, authentication and authorization tools such as RSAM, ServiceNow, IDAnywhere)
- Experience with Application, Database and Platform onboarding lifecycle and related evaluation (SEAL, Harmony, Permit-To-X)
- Ability to build out workflows via (Visio, Lucid)
- Experience in a large Technology environment
