below marketmost similar roles pay hereabove market
This listing doesn't post a salary. Most similar roles pay
$161,250–$216,271.
Based on 240 similar postings.
Employer
About JPMorgan Chase
JPMorgan Chase & Co. is a global financial services firm and one of the largest banks in the world, offering investment banking, commercial banking, asset management, and consumer financial services.
JPMorgan Chase currently has
1243 open roles
on FindRole.
The Lead Cybersecurity Architect joins the Cybersecurity and Technology Controls line of business to develop high-quality cybersecurity solutions across complex enterprise technologies. This role focuses on securing Collaboration & Communication technologies, including cloud platforms, SaaS services, Microsoft 365, and AI-enabled capabilities. You will define cybersecurity architecture strategies, perform threat modeling, conduct attack-surface analysis, and lead security design reviews for strategic technology initiatives. Key responsibilities include identifying risks, establishing reusable security patterns, and assessing third-party integrations, APIs, and authentication patterns. You will utilize programming languages, AWS, GCP, Microsoft Azure, and Microsoft 365 tools like Entra ID and Microsoft Defender. The role requires expertise in NIST, MITRE ATT&CK, STRIDE, and OWASP frameworks to solve complex security problems within a financial services technology environment.
Define and influence cybersecurity architecture strategy and target-state security patterns for cloud, SaaS, and AI-enabled technologies.
Lead threat modeling, attack-surface analysis, and security architecture assessments across applications and emerging technologies.
Conduct security architecture design reviews to identify threats, control gaps, and drive mitigation strategies.
Evaluate cybersecurity risks associated with third-party integrations, APIs, data flows, and trust boundaries.
Assess existing security controls to define practical mitigation strategies and reusable security patterns.
Translate cybersecurity findings into actionable remediation plans and drive complex issues toward resolution with engineering and risk teams.
Identify opportunities to automate and prevent recurring issues through scalable controls and security-by-design practices.
Use enterprise-authorized AI capabilities to accelerate risk analysis, architecture assessment, and control validation.
What we're looking for
Formal training or certification in cybersecurity architecture and 5+ years of applied experience.
Hands-on experience delivering enterprise-level cybersecurity architecture, solutions, and security controls across complex technology environments.
Advanced expertise in one or more programming languages and/or applications with advanced knowledge of cybersecurity architecture across disciplines like cloud, SaaS, AI/ML, or application security.
Hands-on experience conducting and leading threat modeling, attack-surface analysis, security architecture assessments, and security design reviews.
Proficiency in automation, continuous delivery methods, and Software Development Life Cycle practices.
Demonstrated experience using enterprise-authorized AI capabilities to support cybersecurity architecture workflows with strong validation practices.
Experience securing enterprise cloud and SaaS environments, including AWS, GCP, and Microsoft Azure (preferred).
Experience securing AI/ML and LLM-enabled applications, agents, and emerging AI capabilities (preferred).
Cybersecurity Architecture
AWS
Microsoft Azure
GCP
Microsoft 365
SaaS
AI
ML
LLM
Threat Modeling
STRIDE
NIST
MITRE ATT&CK
OWASP
zero-trust
Identity and Access Management
API Security
SDLC
OAuth
Microsoft Entra ID
Microsoft Defender
Cybersecurity Architecture
Public Cloud
AI
ML
Software Architecture
Application Development
SDLC
Coding Frameworks
Risk Assessment
Security Validation
Data Sensitivity