Tech Risk and Controls Lead

We need to output HTML fragment with sections: About the role? Actually we have job description text. We need headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Use only sections that have real content. We have: Job Description paragraph (intro) maybe "About the role". Then "Job Responsibilities" list. Then "Required Qualifications, Capabilities, And Skills" and "Preferred Qualifications, Capabilities, And Skills". Could combine as Requirements/Qualifications/Skills. Also "ABOUT US" maybe not needed? It's company overview; could be part of About the role? But we have "About The Team" also. However we should not repeat job title as heading. We can include About the role (intro paragraph). Responsibilities (list). Requirements (maybe combine required qualifications). Qualifications (maybe preferred?). Skills (maybe list skills). Benefits (we have benefits description). Pay (we have mention of competitive total rewards package, base salary determined based on role, experience, skill set and location; commission-based pay and/or discretionary incentive compensation). That's pay info. Schedule not mentioned, so omit. We must not include boilerplate like EEO, equal opportunity, etc. Also remove navigation, cookie, legal, duplicated lines. Also remove "About Us" maybe not needed as it's generic; but we could keep as part of About the role? The instruction: preserve ALL substantive information; do not invent or summarize away detail. So we need to keep the company overview? It's substantive but maybe not required for job posting; but it's part of description. However we have limited sections; we could include an "About the company" section? Not in allowed headings list. The allowed headings are specific: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must use those headings only for sections. So we need to map content to those headings. The company overview could go under About the role? Possibly. But About the role likely expects description of role, not company. However we can include company overview in About the role paragraph as part of role context. That's acceptable. We must not repeat job title as heading. So we will not include heading for job title. We need to output only HTML fragment, no html/body tags. We need to use

for section headings. Use

• for any list of duties/requirements/benefits. Use

  for prose. We need to preserve all substantive information: responsibilities list, required qualifications, preferred qualifications, benefits, pay info. We need to avoid filler like "commensurate with experience", etc. Not present. We need to remove duplicated lines. Ensure we don't repeat same bullet. Let's extract content. Intro paragraph: "Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management. As a Tech Risk & Controls Lead at JPMorgan Chase within Employee Platforms / Workforce and Experience Technology, you will be responsible for identifying, and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards. By partnering with various stakeholders, including Product Owners, Business Control Managers, and Regulators, you will contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business. Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape." That's prose. Responsibilities bullet list: - Ensure effective identification, quantification, communication, and management of technology risk, focusing on root cause analysis and resolution recommendations - Develop and maintain robust relationships, becoming a trusted partner with LOB technologists, assessments teams, and data officers to facilitate cross-functional collaboration and progress toward shared goals - Execute reporting and governance of controls, policies, issue management, and measurements, offering senior management insights into control effectiveness and inform governance work - Proactively monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance Required Qualifications, Capabilities, And Skills: - 5+ years of experience or equivalent expertise in technology risk management, information security, or related field, emphasizing risk identification, assessment, and mitigation - Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements - Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies - Demonstrated ability to influence executive-level strategic decision-making and translating technology insights into business strategies for senior executives Preferred Qualifications, Capabilities, And Skills: - CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications are preferred - Experience with third party vendor risk assessments, ability to partner with procurement, legal, and technology teams to assess and manage third-party risk, document findings, and drive mitigations. - Experience, curiosity or knowledge of applying AI security concepts to strengthen governance, risk, and control frameworks - Knowledge of generative AI, MCP, and agentic systems (threats, controls, mitigations, industry frameworks, compensating controls, guardrails) About US (company overview) maybe we can incorporate into About the role paragraph as additional prose. Benefits: "We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process." Pay: The competitive total rewards package includes base salary etc. That's pay info. Could be under Pay section. But we also have benefits list separate. So we need Benefits section with list of benefits. Pay section: mention base salary determined based on role, experience, skill set and location; commission-based pay and/or discretionary incentive compensation. Schedule: not present, omit. We must not include boilerplate like EEO, equal opportunity, etc. Also remove "About The Team" maybe not needed; but it's substantive about team. Could be included under About the role? Might be okay. We need to avoid duplication: The benefits list appears also in the paragraph; we will list them as

  . We need to ensure we don't include "Additional details about total compensation and benefits will be provided during the hiring process." That's okay. Now construct HTML. We'll have:

  About the role

  Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management. As a Tech Risk & Controls Lead at JPMorgan Chase within Employee Platforms / Workforce and Experience Technology, you will be responsible for identifying, and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards. By partnering with various stakeholders, including Product Owners, Business Control Managers, and Regulators, you will contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business. Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape. JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management. Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.

  But we might be adding too much; but it's substantive. Then Responsibilities:

  Responsibilities

  • Ensure effective identification, quantification, communication, and management of technology risk, focusing on root cause analysis and resolution recommendations
  • Develop and maintain robust relationships, becoming a trusted partner with LOB technologists, assessments teams, and data officers to facilitate cross-functional collaboration and progress toward shared goals
  • Execute reporting and governance of controls, policies, issue management, and measurements, offering senior management insights into control effectiveness and inform governance work
  • Proactively monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance
  Then Requirements (maybe combine required qualifications). Use heading Requirements.

  Requirements

  • 5+ years of experience or equivalent expertise in technology risk management, information security, or related field, emphasizing risk identification, assessment, and mitigation
  • Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements
  • Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies
  • Demonstrated ability to influence executive-level strategic decision-making and translating technology insights into business strategies for senior executives
  Then Qualifications (preferred). Use heading Qualifications.

  Qualifications

  • CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications are preferred
  • Experience with third party vendor risk assessments, ability to partner with procurement, legal, and technology teams to assess and manage third-party risk, document findings, and drive mitigations.
  • Experience, curiosity or knowledge of applying AI security concepts to strengthen governance, risk, and control frameworks
  • Knowledge of generative AI, MCP, and agentic systems (threats, controls, mitigations, industry frameworks, compensating controls, guardrails)
  Then Skills? Could be omitted if we already covered skills in qualifications. But we could combine skills into Qualifications. However we need to follow instruction: use headings only when posting has real specific content. We have content for Skills? Not explicitly separate; but we could treat the required qualifications as skills. Might be okay to omit Skills section. Benefits:

  Benefits

  • Comprehensive health care coverage
  • On-site health and wellness centers
  • Retirement savings plan
  • Backup childcare
  • Tuition reimbursement
  • Mental health support
  • Financial coaching
  Pay:

  Pay

  Competitive total rewards package including base salary determined based on the role, experience, skill set and location. Eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions.

  We should not include "Additional details about total compensation and benefits will be provided during the hiring process." That's maybe boilerplate but it's substantive? It's a statement about process; could be omitted as it's not specific detail. Might be considered filler but it's okay to keep. However we already have benefits and pay; that line is generic; we could omit to avoid filler. Now ensure we didn't include any disallowed headings like About Us, About The Team. We incorporated company overview into About the role paragraph. Check for any duplicated lines: none. Check for any boilerplate: