Tech Risk and Controls Lead

Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management.

As a Tech Risk Controls Lead at JPMorganChase within Corporate – Employee Platforms, your role is to protect the firm and strengthen operational excellence through technology, business, and operational resiliency. In this role you will report to the Head of Resiliency for Employee Platforms, where you will govern compliance with resiliency control objectives and advance a strategy that enables critical business services to withstand and recover from disruption. You will lead initiatives spanning technology, cloud, cyber and operational recovery, while modernizing the resiliency function through responsible use of AI, automation and data-driven insights.

As part of the Employee Platforms Resiliency organization, you will embed resiliency throughout the technology lifecycle; maintain regulatory, recovery planning, testing and control-procedure compliance; and partner with senior stakeholders across Engineering, Architecture, Product, Infrastructure, Cybersecurity, Operations, Risk and Business teams. Your key responsibility is the Employee Platforms Permit-to-Operate (PTX) process, incorporating recovery, availability, cloud, cyber and operational resilience requirements early enough to identify and remediate gaps before production.

Job responsibilities

• Identifies, quantifies, communicates and manages technology risk, including root-cause analysis, control-gap assessment and actionable remediation recommendations.

• Executes Employee Platforms resiliency governance and roadmap priorities across technology recovery, cyber recovery, public and hybrid cloud, operational resiliency and business service readiness.

• Governs resiliency control procedures, recovery plans, testing obligations, metrics, issues and action plans; provides executive reporting and insight on control effectiveness, risk posture and compliance.

• Leads PTX resiliency governance by partnering with Engineering, Architecture, Product, Application Owners and SRE teams to validate requirements before production and improve recoverability, availability, fault tolerance, scalability, observability and operational resilience.

• Oversees recovery planning, recovery testing, cyber and data recovery, documentation and non-compliant controls at application, platform and component levels, including Technology Recovery Action Plans and Application Recovery Plans.

• Supports test planning, execution, evidence collection and reporting; regulatory, audit and control reviews; and remediation of resiliency findings and action plans.

• Aligns technology recovery capabilities with business continuity objectives by validating service readiness, recovery dependencies and stakeholder response procedures.

• Builds trusted partnerships with Lines of Business, Cybersecurity and Technology Controls, Firmwide Business Resiliency, Firmwide Technology Resiliency, Architecture, Engineering, Infrastructure, assessment teams and data officers.

• Drives simplification, standardization, reuse, automation and continuous improvement across recurring control testing, assessments, evidence collection, reporting, recovery-plan review, testing analysis and remediation tracking.

• Uses enterprise-authorized AI, Large Language Models, Microsoft Copilot, GitHub Copilot, VS Code, agents and analytics to accelerate risk and control work, while validating outputs and maintaining security, transparency, auditability and regulatory alignment.

• Coaches, mentor and train resiliency managers, application owners, engineers, SREs, architects and technology leaders, helping evolve resiliency toward a predictive, automated and AI-enabled capability.

Required qualifications, capabilities, and skills

• 5+ years of experience or equivalent expertise in technology risk management, cybersecurity, regulatory compliance or risk mitigation.
• Experience in technology or business resiliency, disaster recovery, infrastructure or platform engineering, SRE, cloud engineering, or a related technology discipline.
• Strong knowledge of resiliency frameworks, recovery planning, operational resiliency, risk management, control governance, testing methodologies and compliance practices.
• Proven success leading complex cross-functional programs, initiatives or governance functions with measurable outcomes and executive visibility.
• Demonstrated ability to influence and build partnerships across Engineering, Architecture, Product, Infrastructure, Cybersecurity, Operations, Risk and Business organizations.
• Exceptional written, verbal, presentation and executive communication skills, with the ability to translate technical concepts into actionable business outcomes.
• Experience using metrics, data analytics and executive reporting to drive organizational improvement and resiliency outcomes.

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.