The Cybersecurity & Technology Controls group at JPMorganChase aligns the firm’s cybersecurity, access management, controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group’s number one priority is to enable the business by keeping the firm safe, stable and resilient.
As a Technology Risk & Controls (TRC) Associate within the Cybersecurity and Technology Controls organisation, you will contribute to the successful management of technology-aligned aspects of Governance, Risk, and Compliance in line with the firm’s standards. You will collaborate with a broad range of stakeholders, leveraging your knowledge of risk management principles and practices to assess and monitor risks and implement effective controls. Your contributions will strengthen the firm’s risk posture, enhance operational resilience, and support regulatory compliance.
Job responsibilities
- Assess and monitor technology risks, ensuring compliance with firm standards, regulatory requirements, and industry best practices
- Support implementation and evaluation of effective controls, identifying gaps and recommending improvements
- Demonstrate good analytical and problem-solving skills, with the ability to break down complex processes, analyze potential risks and present solutions to key stakeholders
- Communicate findings and contribute to recommendations for improvements, ensuring alignment with organisational objectives and risk appetite
- Conduct thorough root cause analysis and provide actionable insights to ensure issues are fully resolved and controls are sustainable
- Collaborate with business technologists, risk, and audit teams to manage risk and drive cross-functional solutions
- Provide risk reporting and governance insights to senior management to inform decision-making
- Promote a culture of risk awareness and adherence to best practices across the organisation
Required Qualifications, Capabilities, and Skills
- Experience in technology risk management, information security, or a related field, with emphasis on risk identification, assessment, mitigation, and control evaluation
- Proficient knowledge of risk management frameworks, regulations, and industry standards
- Knowledge of security controls, and vulnerability management in public cloud environments
- Excellent interpersonal and communication skills, including the ability to influence and engage stakeholders across levels
- Strong prioritisation and multitasking skills, with the ability to work independently and drive change in a dynamic environment
- Self-motivated with the ability to multi-task, prioritize and thrive in a fast-paced and evolving environment
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.