Technology Risk and Controls Lead - Business Aligned Specialized Solutions

We need to output HTML fragment with sections: About the role? Actually we need to use headings for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must include only sections that have real specific content. The posting includes: Job Description (intro), Job Responsibilities, Required Qualifications, Capabilities, And Skills, Preferred Qualifications..., About Us, About The Team. Also mentions total rewards package, benefits, etc. There's no explicit Pay or Schedule specifics. So we should not create Pay or Schedule sections because no specific content. Benefits: there is mention of benefits: competitive total rewards package, base salary determined..., commission-based pay, discretionary incentive compensation, benefits include comprehensive health care coverage, on-site health and wellness centers, retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. That's specific enough for Benefits section. Also maybe "About the role" could be the introductory paragraph. We'll treat that as About the role. Responsibilities: list. Requirements: maybe combine Required Qualifications and Preferred? The instruction: Use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It seems they expect separate headings for Requirements, Qualifications, Skills. But we need to decide based on content. The posting has "Required Qualifications, Capabilities, And Skills" and "Preferred Qualifications, Capabilities, And Skills". Could split into Qualifications (required) and Skills (maybe from required). But we can combine required qualifications into Requirements section, and preferred into Qualifications? Or we could have Requirements (required), Qualifications (preferred), Skills (maybe from required). However to avoid thin sections, better to have a few substantive sections: About the role, Responsibilities, Required Qualifications, Preferred Qualifications, Benefits. But the instruction says use those headings as examples, not mandatory to use all. It says: Use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can choose any of those that have content. We should not create empty sections. So we will produce:

About the role

...

Responsibilities

...

Required Qualifications

...

Preferred Qualifications

...

Benefits

...

We must not repeat job title as heading. No Job ID. Remove boilerplate like EEO, etc. Also remove "About Us" and "About The Team" maybe not needed as separate sections? Could incorporate into About the role? But we have About the role already; we could add a short paragraph about the firm from About Us. However the instruction: Preserve ALL substantive information; do NOT invent or summarize away detail. So we need to include the About Us and About The Team info somewhere. Could add a section "About the company" but not in allowed headings. But we could put it under About the role? Might be okay to add a

after About the role describing the firm. However the heading "About the role" is meant for role description; adding company info might be okay but could be considered not strictly role. Better to add a separate section "About the company" but not in allowed list; but the instruction says use those headings as examples, not that we cannot use other headings. It says use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but suggests using those. Safer to stick to those. We could incorporate company info into About the role paragraph. That preserves substance (we are not omitting). We'll include the company overview within that paragraph. We must remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. So we need to strip out the EEO statements, the "Visit our FAQs..." etc. Also remove "About Us" heading? We'll keep content but not as heading. Let's extract content: Job Description paragraph: "Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management. As a Tech Risk & Controls Lead in Infrastructure Platforms supporting the Business Aligned Specialized Solutions product line, you will be responsible for identifying, and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards. By partnering with various stakeholders, including Product Owners, Business Control Managers, and Regulators, you will contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business. Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape." That's the role description. Responsibilities bullet list: - Ensure effective identification, quantification, communication, and management of technology risk, focusing on root cause analysis and resolution recommendations - Develop and maintain robust relationships, becoming a trusted partner with LOB technologists, assessments teams, and data officers to facilitate cross-functional collaboration and progress toward shared goals - Execute reporting and governance of controls, policies, issue management, and measurements, offering senior management insights into control effectiveness and inform governance work - Proactively monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance - Uses enterprise-authorized AI capabilities within the work environment to accelerate synthesis of risk/control evidence and draft executive-ready reporting, validating outputs and handling data according to sensitivity and security requirements - Promotes reuse-first, AI-assisted approaches to streamline recurring control testing and issue/action-plan management routines, ensuring human review and alignment to auditability and regulatory expectations Note: The verbs are capitalized inconsistently; we keep as is. Required Qualifications bullet list: - 5+ years of experience or equivalent expertise in technology risk management, information security, or related field, emphasizing risk identification, assessment, and mitigation - Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements - Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies - Demonstrated ability to influence executive-level strategic decision-making and translating technology insights into business strategies for senior executives - Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support technology risk and controls workflows with strong validation habits and awareness of data sensitivity. - Ability to review and validate AI-assisted risk summaries and recommendations before use, escalating when uncertain and ensuring outcomes align to security, auditability, and regulatory expectations. Preferred Qualifications bullet list: - CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications are preferred Benefits content: "We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more." We could also include "Additional details about total compensation and benefits will be provided during the hiring process." but that's vague; maybe we keep it as part of benefits. We should not include Pay or Schedule sections because no specific numbers. Now we need to output HTML fragment only, no markdown fences. Let's craft:

About the role

Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management. As a Tech Risk & Controls Lead in Infrastructure Platforms supporting the Business Aligned Specialized Solutions product line, you will be responsible for identifying, and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards. By partnering with various stakeholders, including Product Owners, Business Control Managers, and Regulators, you will contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business. Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape. JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management. Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.

Responsibilities

• Ensure effective identification, quantification, communication, and management of technology risk, focusing on root cause analysis and resolution recommendations
• Develop and maintain robust relationships, becoming a trusted partner with LOB technologists, assessments teams, and data officers to facilitate cross-functional collaboration and progress toward shared goals
• Execute reporting and governance of controls, policies, issue management, and measurements, offering senior management insights into control effectiveness and inform governance work
• Proactively monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance
• Uses enterprise-authorized AI capabilities within the work environment to accelerate synthesis of risk/control evidence and draft executive-ready reporting, validating outputs and handling data according to sensitivity and security requirements
• Promotes reuse-first, AI-assisted approaches to streamline recurring control testing and issue/action-plan management routines, ensuring human review and alignment to auditability and regulatory expectations

Required Qualifications

• 5+ years of experience or equivalent expertise in technology risk management, information security, or related field, emphasizing risk identification, assessment, and mitigation
• Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements
• Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies
• Demonstrated ability to influence executive-level strategic decision-making and translating technology insights into business strategies for senior executives
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support technology risk and controls workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted risk summaries and recommendations before use, escalating when uncertain and ensuring outcomes align to security, auditability, and regulatory expectations.

Preferred Qualifications

• CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications are preferred

Benefits

• Competitive total rewards package including base salary determined based on the role, experience, skill set and location
• Eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity
• Comprehensive health care coverage
• On-site health and wellness centers