below marketmost similar roles pay hereabove market
This listing doesn't post a salary. Most similar roles pay
$205,500–$262,950.
Based on 240 similar postings.
Employer
About JPMorgan Chase
JPMorgan Chase & Co. is a global financial services firm and one of the largest banks in the world, offering investment banking, commercial banking, asset management, and consumer financial services.
JPMorgan Chase currently has
1262 open roles
on FindRole.
Listed pay typically runs
$150,433–$215,000
across 11 roles with salary data.
The Tech Risk and Controls Director joins the Consumer & Community Banking team to shape and implement the firm's technology risk management strategy. This role involves identifying and mitigating compliance and operational risks while leading the transformation of technology controls into a proactive, product-based operating model. Key responsibilities include designing controls for agentic artificial intelligence environments, establishing governance for enterprise-authorized AI capabilities, and developing reusable control patterns for identity and access management, change management, and operational resilience. The position requires implementing controls-as-code, policy-as-code, and automated guardrails to ensure continuous monitoring and evidence capture. Candidates must possess expertise in systems thinking, root-cause analysis, and audit readiness. The work focuses on ensuring regulatory compliance and technological resilience within a complex financial services landscape.
Develop and implement technology risk management strategies, policies, and processes to meet regulatory requirements.
Lead the transformation of technology controls into a proactive, product-based operating model with defined intake and delivery processes.
Redesign technology controls specifically for agentic artificial intelligence environments and authorized AI capabilities.
Implement controls-as-code, policy-as-code, automated guardrails, and continuous control signals within development workflows.
Develop reusable control patterns across domains like identity management, change management, and operational resilience.
Design end-to-end traceability for control intent, actions, and outcomes to strengthen audit readiness.
Manage control reporting and performance measurement to translate control health into metrics for senior leadership.
Establish target-state architectures and implementation roadmaps to improve control performance and remove delivery barriers.
What we're looking for
7+ years of experience in technology risk management, cybersecurity, technology controls, software engineering, or a related field.
Demonstrated experience in regulatory compliance and risk mitigation.
Demonstrated experience leading complex technology or controls transformation initiatives, including developing target-state operating models and implementation roadmaps.
Demonstrated experience designing or implementing controls-as-code, policy-as-code, automated guardrails, telemetry-driven controls, continuous monitoring, or evidence automation.
Advanced knowledge of technology risk and control environments, including issue management, audit readiness, evidence standards, data quality, and control design.
Demonstrated experience designing governance for enterprise-authorized AI capabilities or agentic AI-enabled workflows.
Proven ability to lead cross-functional initiatives, manage complex dependencies, and influence senior stakeholders.
Practical knowledge of engineering methods and technology workflows, including systems thinking and root-cause analysis.
Cybersecurity
Risk Management
Cloud Computing
AWS
GCP
Azure
Identity and Access Management
Application Security
Data Protection
Infrastructure as Code
Site Reliability Engineering
Chaos Engineering
Data Analytics
Excel
Google Sheets
CISSP
CISA
CRISC
Open FAIR
Agentic AI
AWS
GCP
Azure
Cloud-Native Architecture
Infrastructure as Code
Identity and Access Management
Application Security
Cloud Security
Data Protection
Chaos Engineering
Site Reliability Engineering
Observability
Incident Response
Disaster Recovery
Business Continuity
High Availability
CISSP
CISA
CRISC
Open FAIR
Distributed Systems