Tech Risk and Controls Lead

What you'll do

• Lead the development of technical control objectives and standards for Security Configuration Management.
• Define measurable performance metrics for each control category, integrating telemetry into governance dashboards.
• Evaluate control sufficiency against threat models, regulatory expectations, and internal policies with security teams.
• Govern control implementation across hybrid ecosystems (cloud, data center, user endpoint environments).
• Assess integration of configuration drift monitoring tools with JPMC's GRC ecosystem to align with standardized control objectives.

What we're looking for

• 5+ years of experience in cybersecurity controls architecture or operations leadership.
• Professional certifications such as CISSP, CISM, AWS Security Specialist, or equivalent.
• Proficient in designing technical control frameworks across hybrid cloud/on-premises environments.
• Experience with GRC tools and infrastructure as code for dynamic security configurations.
• Strong knowledge of metrics and governance frameworks for security configuration management.
• Ability to leverage AI capabilities for cybersecurity architecture analysis and decision-making.