Lead Cybersecurity Architect

Play a vital role in shaping the future of an iconic company and make a direct impact in a dynamic environment designed for top achievers.

As a Sr Lead Cybersecurity Architect at JPMorganChase within Cybersecurity and Technology Controls, you are an integral part of a team that works to develop high-quality cybersecurity solutions for various software applications and platform products. Drive significant business impact through your capabilities and contributions, and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains.

Job responsibilities

• Guide evaluation of current cybersecurity principles, processes, and controls, and lead evaluation of new technology using existing standards and frameworks, influencing peers and decision-makers to adopt leading-edge solutions where appropriate

• Leverage enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity risk analysis and control assessment, validating outputs and handling data according to sensitivity and security requirements

• Provide technical guidance and direction to support the business and its technical teams, contractors, and vendors, serving as a function-wide subject matter expert in one or more areas of focus

• Partner with stakeholders and senior business leaders to recommend business modifications during periods of vulnerability

• Contribute actively to the engineering community as an advocate of firm-wide frameworks, tools, and practices of the software development lifecycle

• Drive reuse-first adoption of AI-assisted security validation within software development lifecycle and toolchain routines, improving control testing, remediation quality, and traceability and auditability in line with resiliency expectations

Required qualifications, capabilities, and skills

• Formal training or certification on cybersecurity architecture concepts and 5+ years applied experience

• Hands-on experience conducting threat modeling, attack-surface analysis, or security architecture assessments

• Hands-on practical experience delivering enterprise-level cybersecurity solutions and controls

• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity

• Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations

• Advanced expertise in one or more programming languages and/or applications, with advanced knowledge of cybersecurity architecture, applications, and technical processes within one or more technical disciplines (e.g., public cloud, AI/ML, mobile)

• Ability to tackle design and functionality problems independently with little to no oversight

• Ability to evaluate current and emerging technologies to select or recommend the best solutions for future-state architecture

• Experience effectively communicating complex security concepts to senior business leaders and non-technical stakeholders

Preferred qualifications, capabilities, and skills

• Experience securing enterprise cloud and software-as-a-service environments, including assessing architecture, data flows, identity, access, integrations, and security controls across third-party services

• Security architecture experience across major cloud platforms, including AWS, GCP, and Microsoft Azure, with an understanding of cloud-native security controls and shared responsibility models

• Experience evaluating software-as-a-service integrations, APIs, OAuth applications, service principals, application identities, and machine-to-machine authentication from a security and risk perspective

• Experience securing AI/ML and large language model-enabled applications, agents, and emerging AI capabilities, including risks associated with data access, permissions, external integrations, and third-party model dependencies

• Experience developing security control baselines, architecture standards, threat models, assessment frameworks, and reusable security patterns across cloud and software-as-a-service technologies

• Familiarity with established security frameworks and methodologies such as NIST, MITRE ATT&CK, STRIDE, OWASP, and zero-trust principles

#CTC