Tech Risk Assurance Lead

Join our team to play a pivotal role in mitigating technology risks and upholding operational excellence, driving innovation in risk management.

As a Tech Risk Assurance Lead at JPMorgan Chase within Cybersecurity Technology & Controls, you will help ensure the security and resilience of our systems and data. You will focus on the identification, analysis, and management of technology and cyber operational risks firmwide, leveraging your expertise in technology risk and controls to identify, assess, and manage risks across systems, evaluate control effectiveness, and ensure alignment with risk and regulatory standards. This role offers an exciting opportunity to collaborate with cross-product and functional teams, stay abreast of the latest developments in technology, and implement innovative solutions that enhance the organization's risk posture.

Job responsibilities

• Lead end-to-end technology risk assessments across systems and platforms, identifying risks and driving actionable remediation strategies
• Evaluate the design and operational effectiveness of technology controls, ensuring alignment with internal standards and regulatory requirements
• Partner with cross-functional and cross-product teams to embed consistent risk management practices and foster a culture of shared accountability
• Develop and maintain risk reporting frameworks that provide leadership with clear, data-driven insights into the firm's technology risk posture
• Monitor emerging technology threats and evolving regulatory developments, translating findings into proactive risk mitigation strategies
• Facilitate risk governance activities including risk committee preparation, issue tracking, and escalation management
• Drive continuous improvement initiatives that strengthen the effectiveness and efficiency of the technology risk and controls program
• Collaborate with audit, compliance, and second-line risk teams to support regulatory examinations and internal reviews

Required qualifications, capabilities, and skills

• Formal training or certification on tech risk assurance concepts and 5+ years applied experience
• Demonstrated experience identifying, assessing, and managing technology and cyber operational risks within a large, complex organization
• Technical proficiency in AI risk governance and data security, securing platforms, applications, and business processes with understanding of AI threats, mitigations, and defense mechanisms
• Strong knowledge of technology control frameworks and risk management methodologies (e.g., NIST, ISO 27001, COBIT)
• Proven ability to evaluate control effectiveness and translate technical risk findings into clear business impact narratives
• Experience engaging with regulatory requirements and supporting audit or examination activities
• Strong analytical and problem-solving skills with the ability to manage multiple priorities in a fast-paced environment
• Excellent written and verbal communication skills, with the ability to present complex risk topics to both technical and non-technical stakeholders

Preferred qualifications, capabilities, and skills

• Industry certifications such as CRISC, CISM, CISSP, or equivalent
• Experience working within financial services or a highly regulated industry
• Familiarity with cloud security risk management and emerging technology risk domains
• Prior experience supporting regulatory engagements or technology risk governance programs
• Knowledge of cybersecurity operations, threat intelligence, or vulnerability management practices

#CTC