Strengthen technology controls and issue management, translating risk into action that improves operational resilience.

As a Tech Risk and Controls Lead at JPMorgan Chase within Network Services, you will identify, assess, and reduce technology risk by strengthening the control environment and improving issue management and reporting. You will partner with technology and business stakeholders to ensure controls are designed effectively, operating as intended, and supported by clear governance and evidence. You will translate complex risk topics into actionable insights that improve operational resilience and support regulatory and industry expectations.

Job responsibilities

• Identify technology risks and control gaps, performing root cause analysis and recommending practical, sustainable remediation actions
• Assess the design and operating effectiveness of controls and provide clear guidance on control requirements, testing, and evidence expectations
• Partner with technology-aligned process owners to embed controls into day-to-day execution and improve control sustainability
• Execute governance routines for controls, policies, issues, and key risk indicators to provide transparent reporting to senior stakeholders
• Monitor control performance trends, emerging risk themes, and recurring issues to proactively strengthen the risk posture
• Coordinate across stakeholders to drive timely closure of control deficiencies and reduce residual risk
• Facilitate clear, consistent communications on technology risk posture, control health, and remediation progress
• Contribute to continuous improvement of risk and control processes through automation, standardization, and simplified reporting

Required qualifications, capabilities and skills

• Formal training or certification on technology risk and controls concepts and 5+ years applied experience
• Experience in technology risk management, controls, audit, information security, or a related field within a regulated environment
• Working knowledge of risk management frameworks and industry standards applicable to technology and cybersecurity risk
• Ability to evaluate control design and operating effectiveness, including documentation, testing approaches, and evidence quality
• Strong analytical and problem-solving skills with a focus on root cause identification and pragmatic solutions
• Strong written and verbal communication skills, including the ability to present risk insights to senior stakeholders
• Demonstrated ability to influence across teams without direct authority and drive outcomes through collaboration
• High attention to detail and ability to manage multiple priorities in a fast-paced environment

Preferred qualifications, capabilities and skills

• Industry-recognized certifications such as CISM, CRISC, CISSP, or similar
• Experience supporting network, infrastructure, or platform services risk and control environments
• Familiarity with regulatory exams, internal audit interactions, and evidence-based control testing practices
• Experience defining and using key risk indicators and metrics to track control health and remediation progress
• Experience improving governance and reporting through process redesign, automation, or data-driven insights