Technology Operational Risk Management Lead (Cybersecurity) - Vice President

Bring your expertise to JPMorgan Chase. As part of Risk Management and Compliance, you are at the center of keeping JPMorgan Chase strong and resilient. You help the firm grow its business in a responsible way by anticipating new and emerging risks, and using your expert judgement to solve real-world challenges that impact our company, customers and communities. Our culture in Risk Management and Compliance is all about thinking outside the box, challenging the status quo and striving to be best-in-class.

As a Technology Risk Management Vice President within the Commercial & Investment Bank (CIB), you will be responsible for analyzing and identifying technology and cyber operational risks. Additionally to cybersecurity risk assessment activities, you will work closely with CIB Business Operational Risk teams, CIB Technology leadership, and Technology Risk Control teams to drive execution of operational risk management framework procedures. You will need to be an experienced technologist that understands Cybersecurity Risks, controls, and assessment methodologies. You will also participate in efforts to develop data-driven and automated testing approaches to risk identification and control assessment. To be successful in this role, you will need to possess significant technology and business facing activities in this role.

Job Responsibilities

• Understand key processes and controls performed within CIB Technology
• Perform independent assessment of Cybersecurity risks on CIB Technology through CCOR’s monitoring program.
• Manage identified risks using firm’s Operational Risk Management Framework
• Participate and challenge first line control designers and operators.
• Conduct Testing and Monitoring and identify operational risk control gaps.
• Develop and/or challenge KPIs / KRIs related to these risks through effective monitoring activities.
• Participate in firm-wide global initiatives to analyze impact to the firm.
• Partner and advise internal 2LoD teams of thematic monitoring and testing deficiencies.
• Manage book of work assessments impacting CIB and produce weekly status updates.

Required qualifications, capabilities and skills

• 7+ years of experience with infrastructure/application architecture.
• 5+ years in a senior technology role (engineering, operations, or strategic planning)
• 5+ years of Cybersecurity risk working experience.
• Ability to understand complex technical systems, the business processes they support and synthesize the corresponding risks and controls.
• Proven leadership skills and ability to influence decisions at senior levels
• Ability to seamlessly transition between business and technical discussion.
• Strong organizational and multi-tasking skills with demonstrated ability to manage expectations.
• Excellent verbal and written communication skills, including the ability to present concise findings in a persuasive manner to a senior audience.
• Deadline driven; delivering results with limited supervision.