Tech Risk and Controls Lead

Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management.

As a Tech Risk Controls Lead at JPMorganChase within Corporate – Employee Platforms, your role is to protect the firm and strengthen operational excellence through technology, business, and operational resiliency. In this role you will report to the Head of Resiliency for Employee Platforms, where you will govern compliance with resiliency control objectives and advance a strategy that enables critical business services to withstand and recover from disruption. You will lead initiatives spanning technology, cloud, cyber and operational recovery, while modernizing the resiliency function through responsible use of AI, automation and data-driven insights.

As part of the Employee Platforms Resiliency organization, you will embed resiliency throughout the technology lifecycle; maintain regulatory, recovery planning, testing and control-procedure compliance; and partner with senior stakeholders across Engineering, Architecture, Product, Infrastructure, Cybersecurity, Operations, Risk and Business teams. Your key responsibility is the Employee Platforms Permit-to-Operate (PTX) process, incorporating recovery, availability, cloud, cyber and operational resilience requirements early enough to identify and remediate gaps before production.

Job responsibilities

• Identifies, quantifies, communicates and manages technology risk, including root-cause analysis, control-gap assessment and actionable remediation recommendations.

• Executes Employee Platforms resiliency governance and roadmap priorities across technology recovery, cyber recovery, public and hybrid cloud, operational resiliency and business service readiness.

• Governs resiliency control procedures, recovery plans, testing obligations, metrics, issues and action plans; provides executive reporting and insight on control effectiveness, risk posture and compliance.

• Leads PTX resiliency governance by partnering with Engineering, Architecture, Product, Application Owners and SRE teams to validate requirements before production and improve recoverability, availability, fault tolerance, scalability, observability and operational resilience.

• Oversees recovery planning, recovery testing, cyber and data recovery, documentation and non-compliant controls at application, platform and component levels, including Technology Recovery Action Plans and Application Recovery Plans.

• Supports test planning, execution, evidence collection and reporting; regulatory, audit and control reviews; and remediation of resiliency findings and action plans.

• Aligns technology recovery capabilities with business continuity objectives by validating service readiness, recovery dependencies and stakeholder response procedures.

• Builds trusted partnerships with Lines of Business, Cybersecurity and Technology Controls, Firmwide Business Resiliency, Firmwide Technology Resiliency, Architecture, Engineering, Infrastructure, assessment teams and data officers.

• Drives simplification, standardization, reuse, automation and continuous improvement across recurring control testing, assessments, evidence collection, reporting, recovery-plan review, testing analysis and remediation tracking.

• Uses enterprise-authorized AI, Large Language Models, Microsoft Copilot, GitHub Copilot, VS Code, agents and analytics to accelerate risk and control work, while validating outputs and maintaining security, transparency, auditability and regulatory alignment.

• Coaches, mentor and train resiliency managers, application owners, engineers, SREs, architects and technology leaders, helping evolve resiliency toward a predictive, automated and AI-enabled capability.

Required qualifications, capabilities, and skills

• 5+ years of experience or equivalent expertise in technology risk management, cybersecurity, regulatory compliance or risk mitigation.

• Experience in technology or business resiliency, disaster recovery, infrastructure or platform engineering, SRE, cloud engineering, or a related technology discipline.

• Strong knowledge of resiliency frameworks, recovery planning, operational resiliency, risk management, control governance, testing methodologies and compliance practices.

• Proven success leading complex cross-functional programs, initiatives or governance functions with measurable outcomes and executive visibility.

• Demonstrated ability to influence and build partnerships across Engineering, Architecture, Product, Infrastructure, Cybersecurity, Operations, Risk and Business organizations.

• Exceptional written, verbal, presentation and executive communication skills, with the ability to translate technical concepts into actionable business outcomes.

• Experience using metrics, data analytics and executive reporting to drive organizational improvement and resiliency outcomes.