Technology Risk and Controls Lead - International Consumer Business

We know that people want great value combined with an excellent experience from a bank they can trust so, after our successful launch in the UK, we’re launching our digital bank Chase Germany, to revolutionize mobile banking with seamless journeys that our customers love. We're already trusted by millions in the US and quickly growing in the UK – and now, we’re building the bank of the future from the ground up, channeling our start-up mentality every step of the way – meaning you’ll have the opportunity to make a real impact as we go live in 2026.

While we’re looking for professional skills, culture is just as important to us. We understand that everyone’s unique – and that diversity of thought, experience, and background is what makes a good team, great. By bringing people with different points of view together, we can represent everyone and truly reflect the communities we serve in Germany. This way, there’s scope for you to make a huge difference – on us as a company, and on our clients and business partners across Europe and around the world.

Our Cybersecurity & Technology Controls team is at the heart of this venture, focused on getting smart ideas into the hands of our customers. We’re looking for people who have a curious mindset, thrive in collaborative squads, and are passionate about new cybersecurity frameworks and solutions. By their nature, our people are also solution-oriented, commercially savvy, and have a head for fintech.

As a Technology Risk & Controls Lead at JPMorgan Chase within the International Consumer Bank, you will be part of a flat-structure organization. Your responsibilities will include analyzing, consolidating, and supporting the production of reports on trends and metrics suitable for consumption at varying levels of technical and risk understanding, as well as for all levels of management, including external regulators.

 

Job summary 

We are looking for someone as part of the Cybersecurity & Technology Controls (CTC) organization to analyze, consolidate and support production of reports on trends/metrics suitable for consumption at varying levels of technical and risk understanding, as well as for all levels of management, including external regulators. The successful candidate will need to be able to understand and articulate cyber and technological risks and work with technical and non-technical control owners to derive actionable and measurable remediation tasks.

This role is an opportunity to work with a diverse collection of stakeholders within an exciting technical environment at the leading edge of digital banking and propel your knowledge and experience.

 

Responsibilities:

• Lead and mature cyber risk management activities across consumer banking products, providing thought leadership and guidance to peers and senior management.
• Ensure technology risk impacting the business is effectively identified, quantified, communicated, and managed, including root cause analysis, recommendations for resolution, and identification of key themes.
• Develop, monitor, and report on cybersecurity-related KPIs and KRIs to assess and enhance the effectiveness of the technology control environment.
• Support and review the effectiveness of technology controls against requirements, policy statements, and regulatory standards, including analysis and reporting on compliance at the LoB, firmwide, and regulatory levels.
• Build and maintain strong relationships with stakeholders, technology teams, and supporting corporate functions to facilitate oversight, business-as-usual risk activities, and effective reporting on the performance of the technology control environment.

 

Qualifications:

• Advanced knowledge of multiple IT and cybersecurity controls, as well as regulatory requirements, with experience working across large environments.
• Excellent communication skills and the ability to collaborate with high-performing teams and individuals throughout the firm to accomplish common goals.
• Ability to explain complex technology and security risks to non-technical audiences.
• Strong proficiency in MS Office tools and a proven track record of creating high-quality deliverables for both internal and external stakeholders.
• Expertise in information security domains, including policies and standards, risk and control assessments, access controls, regulatory compliance, technology resiliency, risk and control governance and metrics, incident management, secure systems development lifecycle, vulnerability management, third-party risk management, and data protection.
• Strong analytical skills, including the ability to solve and communicate complex problems, perform data analytics, and deliver measurement and reporting needed to drive continuous improvement.