Compliance - Technology and Cybersecurity Operational Risk Management Lead - Vice President
About the role
As a Technology and Cybersecurity Operational Risk Management Lead with Compliance, Conduct and Operational Risk (CCOR), you will provide independent oversight of technology and cybersecurity operational risk management practices within the Consumer and Community Banking (CCB) line of business. Your role involves conducting risk assessments and control evaluations, collaborating with CCB Technology, Technology Risk Control, and CCB Business Operational and Compliance Risk teams, and developing data-driven approaches leveraging agentic AI and advanced analytics for risk identification and control assessment. You will engage extensively with technology and business stakeholders and report to the Technology & Cyber Operational Risk Officer for Consumer and Community Banking (CCB).
Responsibilities
- Understand key processes and controls performed within Consumer and Community Banking Technology.
- Perform independent Technology, Data, & Cybersecurity risk assessments on Consumer and Community Banking Technology.
- Manage identified risks using the firm's Operational Risk Management Framework.
- Assess emerging risks as part of strategic business risk reviews, analysis of regulatory and market developments, New Business Initiative Approvals, and review of external operational risk events for CCB products coverage.
- Develop and assess KPIs/KRIs related to these risks through effective monitoring activities.
- Partner and advise internal second-line-of-defense (2LoD) teams on thematic control deficiencies and observations.
- Manage book of work assessments impacting CCB and produce weekly status updates.
- Participate in firm-wide global initiatives to analyze impact to the firm.
- Leverage modern risk identification techniques, including scenario analysis, threat modeling, and agentic AI for automated risk investigation and monitoring.
Requirements
- 7+ years of experience with infrastructure/application architecture.
- 7+ years in a senior technology and/or cybersecurity role (engineering, operations, or strategic planning).
- 2+ years in a data architecture or data governance role.
- Ability to understand complex technical systems, the business processes they support, and synthesize the corresponding risks and controls.
- Strong technical background in data-related technologies.
- Experience with AI/ML tools and platforms; understanding of AI governance, ethical considerations, and explainability in risk management.
- Knowledge of second-line risk management (operational risk and compliance) practices.
- Ability to seamlessly transition between business and technical discussions.
- Strong organizational and multitasking skills with demonstrated ability to manage expectations.
- Excellent verbal and written communication skills, including the ability to present concise findings persuasively to a senior audience.
- Able to develop constructive relationships with functional partners.
Benefits
- Comprehensive health care coverage.
- On-site health and wellness centers.
- Retirement savings plan.
- Backup childcare.
- Tuition reimbursement.
- Mental health support.
- Financial coaching.
Additional details about total compensation and benefits will be provided during the hiring process.
About Us
JPMorgan Chase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses, and many of the world’s most prominent corporate, institutional, and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years, and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing, and asset management.
Our professionals in Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Risk Management helps the firm understand, manage, and anticipate risks in a constantly changing environment, covering areas such as evaluating country-specific risk, understanding regulatory changes, and determining creditworthiness. Risk Management provides independent oversight and maintains an effective control environment.