Technology, Risk & Controls Lead - Cybersecurity Governance

Organization Description

As a Technology, Risk & Controls Lead - Executive Governance at JPMorgan Chase within the Cybersecurity & Technology Controls Organization, you'll align within the firm’s access management, controls, and resiliency teams. You'll proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. One priority is to enable the business by keeping the firm safe, stable, and resilient.

Job responsibilities:

The responsibilities of the Technology Executive Governance, Metrics & Reporting will include the below:

• Lead planning and execution of the Global Technology Control Committee – the highest management-level tech control committee at the firm – including setting monthly agendas, maintaining a forward-looking calendar of potential topics, ensuring completion of charter, policy, and other requirements, overseeing meeting logistics/material distribution, and working directly with senior stakeholders
• Oversee regional technology governance committees and management forums, enabling review, discussion, and decision of challenges and opportunities across the organization
• Execute reporting and governance of overall controls, policies, issue management, and measurements, etc., providing insight to senior leaders into effectiveness of controls and inform governance work
• Work with respective senior global technology leadership to execute best-in-class content to disseminate special topics with a view of providing risk posture to senior management
• Establish and maintain strong relationships with internal and external stakeholders, including key cross-functional team leads, regulators, and auditors, to ensure compliance with legal, regulatory, and industry standards
• Analyzing changes to the KRIs, KPIs and Operational metrics for the various technology controls and proactively communicating the impact to the line of business' understanding the metrics and regulatory impact (if any)
• Tracking identified and proposed changes (via the Change Management process used for Communication) and providing information via regular weekly meetings to the Information Security Managers (ISMs), Technology Risk & Control Managers (TRCMs) and relevant stakeholders across different Regions/Countries
• Leading the effort to standardize the Technology Control Committee materials (based on firm wide standards) across all line of businesses & regions within JPMC with aim of achieving a common view of risk across the Firm
• Coordinating with cybersecurity and conduct high level gap analysis of the metrics by working with F&T (Findings & Treatment) team to accommodate the within regional/country requests based on regulatory requirements

Required qualifications, capabilities, and skills:

• Strong ability to craft and deliver executive-level presentations that distill complex technology and cybersecurity topics into clear insights for non-technological business leaders
• Strong organizational skills with ability to communicate all levels of Senior Management across various JPMorgan Chase Lines of Businesses
• Strong execution focus with the ability to push for progress, follow tight deadlines, operate under pressure when required
• Ability to persuade and influence; to be tactful yet assertive with strong collaboration and negotiation skills
• Ability to develop and maintain strong client and stakeholder relationships
• Strategic mindset with strong analytical and problem-solving capabilities

Preferred qualifications, capabilities, and skills:

• Obtain formal training and/or certification in Technology Risk and Compliance, Information Security, Corporate Governance, Metrics & Reporting, preferably at a global financial services organization and 5+ years of experience or equivalent expertise
• Experience in leading or managing the execution of senior management-level governance committees and forums
• Extensive experience within technology, cybersecurity, and/or risk management domains
• Demonstrated experience in leveraging technology standards, frameworks, compliance, and best practice/standards relevant to the financial industry (e.g., ITIL, NIST, ISO, PCI, SOC)

JPMorgan Chase & Co., one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and