Principal Cybersecurity Architect - Database Security | Product Security Lead

JPMorgan Chase - Plano, TX

Full-time - Principal

Plano, TX

Credit Intermediation and Related Activities

About the position

As a Principal Cybersecurity Architect and Product Security Lead in the Cybersecurity & Technology Controls team, you will leverage your expertise in database technology to enhance security measures within the database product line. This role involves collaborating with technology and business colleagues to identify and mitigate security risks, ensuring that products are developed with security as a priority. You will be recognized as a subject matter expert in IT Risk and Cyber domains, driving a culture of security and best practices across the organization.

Responsibilities

• Cultivate a security culture within product teams to prioritize sustainable controls and risk reduction outcomes.
• Embed threat modeling, security architecture, and secure code review into product and application teams.
• Maintain fluency in product strategy, roadmap, and key investment programs.
• Act as the security thought leader for your product, sharing best practices with product and cybersecurity teams.
• Monitor Key Risk Indicators to identify, quantify, and manage security issues in a timely manner.
• Collaborate with product, technology, and business colleagues for audit and regulatory engagements, risk activities, and project initiatives.

Requirements

• Formal training or certification in software engineering concepts with 10 years of applied experience.
• Experience operating in a regulated organization with a 3rd Line of Defense model.
• Detailed technical understanding of Public Cloud computing (GCP/AWS) and security controls.
• Proficient in database encryption techniques for data protection.
• Proficient in database access control mechanisms, including RBAC and FGAC.
• Experience with database auditing and monitoring solutions.
• Proficient in database vulnerability assessment and penetration testing methodologies.
• Experience with secure database architecture design and database hardening techniques.
• Knowledge of database backup, recovery, and disaster recovery strategies.
• Experience integrating database security with IAM systems.

Nice-to-haves

• Knowledge of industry-specific database security standards and regulations (HIPAA, PCI-DSS, GDPR).
• Ability to lead ad hoc teams for control architecture and design.
• Experience translating policy or regulatory requirements into control design for Software Engineers and Solutions Architects.
• Experience in financial services consumer businesses (Mortgages, Cards, or Digital).