Technology Risk and Controls Lead

Responsibilities

• Design, implement, and enhance risk management frameworks and taxonomies to ensure alignment with regulatory and industry standards.
• Lead cross-functional GRC programs and initiatives to uplift and transform technology controls.
• Partner with product, engineering, and business teams to embed best practices and drive adoption of risk standards.
• Oversee governance, reporting, and issue management to provide senior management with insights into risk posture.
• Communicate program status, execution risks, and key decisions to senior stakeholders.
• Identify and mitigate delivery risks to maintain program momentum and strategic alignment.

Requirements

• Deep understanding of end-to-end GRC and Technology Risk ecosystem and lifecycle.
• Experience in Technology Operations or Service Management (incident, problem, and service transition management).
• Proven experience in technical program management, cybersecurity, and technology controls.
• Experience acting as a Technology Auditor within a 3LoD (Three Lines of Defense) model.
• Proficiency with service management tooling, specifically ServiceNow.
• Strong analytical and communication skills to translate technical risks into business impacts.

Preferred Qualifications

• Professional certifications such as CISA, CRISC, CISM, or CIA.
• Experience designing and operating industry-standard frameworks like COBIT, ITIL, or NIST.
• Experience working within a 1LoD Technology Risk and Control function.
• Deep understanding of framework operability across Technology and Cyber operations.

About the Company

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals, and institutional investors. Our corporate teams ensure we are setting our businesses, clients, and employees up for success through excellence in finance, risk, and technology.