Technology Risk and Controls [Multiple Positions Available]

About the role

This position requires up to 10% domestic travel and is based at 10 S Dearborn St, Chicago, IL 60603.

Responsibilities

• Provide guidance in creating risk-focused metrics across technology domains for managing interactive and App2App privileged accounts, internal and third-party system access, cloud data encryption services, and technology asset lifecycle management.
• Conduct reviews of cyber and technology metrics, ensuring proper scoping, sourcing in-scope technology asset data, calculation logic, and threshold setting to maintain effectiveness.
• Analyze metric data and breach patterns, facilitating the calibration of thresholds to ensure effective technology risk management.
• Generate reports with breach commentary for technology control forums, providing insights into risk profile across cybersecurity and technology controls landscape.
• Develop and maintain management guidance for metrics, ensuring alignment with the Organization's Operational Risk Metrics Policy and promoting adherence among metric owners and stakeholders.
• Enhance service capability of the Metrics Program by streamlining operational procedures and operationalizing processes for metrics owners, driving improvements in the operational efficiency of metrics governance processes.
• Work with risk pillars, process owners, risk & control managers from lines of business, product partners, and second line of defense to implement a data-driven approach for cyber & technology control compliance and risk management.
• Support the enhancement of technology risk and controls management, aligning with strategic objectives, cybersecurity principles, and industry standards.

Requirements

Minimum education and experience required:

• Bachelor's degree in Engineering (Any), Computer Science, Information Security, or related field of study plus 7 years of experience in the job offered or as Technology Risk and Controls Lead, Project Manager, Process Consultant, Corporate Quality, or related occupation.
• The employer will alternatively accept a Master's degree in Engineering (Any), Computer Science, Information Security, or related field of study plus 5 years of experience in the job offered or as Technology Risk and Controls Lead, Project Manager, Process Consultant, Corporate Quality, or related occupation.

Skills

This position requires the following experience:

• Five (5) years of experience governing technology risk, identifying, managing and reporting risks, overseeing risk remediation, and treatment of non-compliance issues in technology risk and information security management.
• One (1) year of experience with the following:
  • Identifying and evaluating technology and cyber risks, including change implementation and operation failures;
  • Defining risk and control metrics and developing frameworks aligned with industry standards;
  • Creating strategic plans for GT Metrics and designing KPI & KRI risk metrics, including scoping and data sourcing;
  • Analyzing data flow diagrams and assessing ingestion tools for data flow capabilities;
  • Governing metric development, ensuring lifecycle adherence, and calibrating thresholds according to risk appetite;
  • Monitoring metric performance, escalating breaches, and reporting to control forums;
  • Driving GT Metrics process automation;
  • Analyzing the impact of changes on technology processes for response strategies.

Benefits

• Comprehensive health care coverage
• On-site health and wellness centers
• Retirement savings plan
• Backup childcare
• Tuition reimbursement
• Mental health support
• Financial coaching
• Discretionary incentive compensation (for eligible roles), which may be awarded in recognition of individual achievements and contributions

Pay

Full-Time. Salary: $184,700 per year.

About Us

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses, and many of the world's most prominent corporate, institutional, and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years, and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing, and asset management.