What are the responsibilities and job description for the Tech Risk and Controls Lead position at JPMorgan Chase?
Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management.
As a Tech Risk & Controls Lead at JPMorgan Chase within the Cybersecurity Technology and Controls, you will partner with one or more disciplines, lines of business, regions or locations to respond to evolving business and regulatory control requirements and emerging threats. You will leverage your expert experience technology risk and audit to influence secure IT operations across the firm while ensuring clarity, quality, and sustainability of identified risk (Issues). Responsibilities include offering guidance, best practices, and support to lines of business in determining appropriate corrective actions to reduce operational risk while ensuring compliance to the Firm's CORE risk framework and Global Technology Issue Management Standards and Practices.
Job responsibilities
- Ensure the clarity and quality of identified technology risk from all Lines of Defense, focusing on root cause analysis and resolution recommendations
- Ensure only qualified technology risks are entered into CORE and adhere to Global Technology quality requirements for Issues
- Provide auditability, risk, and sustainability advisement for all identified Issues
- Ensure Issue Action Plans (APs) sufficiently and sustainably address identified risk
- Develop and maintain robust relationships, becoming a trusted partner with LOB technologists, assessments teams, and data officers to facilitate cross-functional collaboration and progress toward shared goals
Required qualifications, capabilities, and skills
- Formal training or certification on security concepts and 5 years of applied experience.
- Good experience in technology audit, expertise in technology risk management, with a focus on managing risk identification, assessment, and mitigation
- Demonstrated proficiency in audit and risk management practices/functions
- Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements
- Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies
- Demonstrated ability to influence executive-level strategic decision-making and translating technology insights into business strategies for senior executives
Preferred qualifications, capabilities, and skills
- CISA, CRISC, or similar industry-recognized risk and risk certifications are preferred
