Tech Risk and Controls Lead - Assessments

The Compute Platforms Network & Storage (CPNS) Technology Risk & Controls Portfolio team provides Governance, Risk, and Controls oversight of the risk assessment, measurement, and strategy of risk and controls globally across our multiple product lines within the Infrastructure Platforms (IP) Line of Business.

As the Tech Risk and Controls Lead within the Compute Platforms Network & Storage (CPNS) Technology Risk & Controls Portfolio team, you will play a crucial role in delivering standardized technology controls assessments and testing. You will focus on validating controls and ensuring the completeness of issue validations, providing Governance, Risk, and Controls oversight of the risk assessment, measurement, and strategy of risk and controls globally across our multiple product lines within the Infrastructure Platforms (IP) Line of Business.

Job responsibilities

• Execute and comply with all pre- and post-completion Issue Validation requirements in alignment with JPMC's firmwide Compliance and Operational Risk Evaluation (CORE) Issue Management Standards.
• Ensure that for all Issues related to a control, the control's design and the sustainability of its performance are assessed, completed, and documented before finalizing in the CORE system.
• Update the Control Evaluation Record (CER) as necessary for both Control Design Evaluation (DE) and Control Performance Evaluation (PE).
• Oversee all Issue dependencies, including linkages and cross-impacted risks, to ensure they are properly addressed during pre- and post-completion Issue Validation.
• Collaborate with product and services teams, portfolio governance, audit, and resiliency teams to develop and refine testing and assessment methodologies and conduct testing.
• Create and maintain documentation to support the testing program.

• At least 5+ years' experience working in technology control assessments, internal/external Technology Audit, or Operational Risk including Tech/Cyber Risk.
• Excellent interpersonal, collaboration, and communication skills; must be able to communicate effectively at all levels of the client's organization.
• Strong data aptitude and experience developing repeatable testing methods.

• Experience working in banking, financial services, or regulated industries, in particular leveraging technology standards, frameworks, compliance, and industry recognized best practice (e.g., ITIL, NIST, ISO, FFIEC).
• Experience with project management fundamentals and managing JIRA backlog.
• Experience using a systematic and disciplined approach to evaluate the effectiveness of Governance, Risk, and Controls.