Tech Risk and Controls Lead - Cloud Foundational Services
On-site · Jersey City, New Jersey, United States
Job Summary
Lead Tech Risk & Controls for JPMorgan Chase's Public Cloud Platform in the Cloud Foundational Services line, serving as the central point of contact for audit clients and driving internal audit programs. Partner with process owners to respond to audit requests, understand legal obligations, document control applicability, and monitor the risk environment. Drive end-to-end engagement with 2LOD during issue validation, communicate audit progress to Senior Leadership, and influence technology risk priorities aligned to the product roadmap. Role emphasizes cross-functional collaboration with Product Managers, Business Control Managers, regulators, and multiple control stakeholders to deliver a comprehensive view of technology risk posture. Requires extensive experience in operational risk, cloud security, AWS, and regulated industries, with strong communication and governance capabilities.
Required Qualifications
- 10+ years in Technology with strong experience in Operational Risk
- Strong experience in various Technology and Cyber domains (e.g., Architecture, Vulnerability Management, Cloud)
- Risk management expertise in AWS services
- Ability to work with data from disparate sources to build a cohesive view on risk
- Strong written and verbal communication skills with ability to communicate security risk concepts to business and technology partners
- Experience working in regulated industries and leveraging technology standards, frameworks, compliance
- Collaboration with internal and external technology audits (3rd Line of Defense) and CCOR Operational Risk Management deep dives (2nd Line of Defense)
- Advanced level in Office 365 with Excel data-sources integration
- Preferable industry certifications related to risk and security
Desired Qualifications
- Experience in Technology Risk & Controls in cloud environments
- AWS experience
- Regulated industries experience
- Strong written and verbal communication skills
- Ability to work with data from disparate sources
- Experience coordinating with 2nd and 3rd line of defense
- Industry certifications in risk/security (preferable)
- Knowledge of frameworks such as NIST, ISO, PCI, SOC
- Office 365 proficiency for data analysis in Excel
- Ability to lead audit programs and interact with senior leadership
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.