Principal Cybersecurity Architect - Database Security | Product Security Lead

$204,250 - $285,000/Yr

JPMorgan Chase - Plano, TX

Full-time - Senior

Plano, TX

Credit Intermediation and Related Activities

About the position

As a Principal Cybersecurity Architect and Product Security Lead at JPMorgan Chase, you will play a critical role in enhancing the security posture of database products. This position involves collaborating with technology and business teams to identify and mitigate security risks, ensuring that products are developed with security in mind from the outset. You will leverage your expertise in database technologies and cybersecurity to drive best practices and foster a culture of security within the organization.

Responsibilities

• Cultivate a security culture within product teams to prioritize sustainable controls and risk reduction outcomes.
• Embed threat modeling, security architecture, and secure code review into product and application teams.
• Act as a security thought leader for database products, sharing best practices and insights with product and cybersecurity teams.
• Monitor Key Risk Indicators to identify, quantify, and manage security issues in a timely manner.
• Collaborate with product, technology, and business colleagues on audit and regulatory engagements, risk activities, and project initiatives.

Requirements

• Formal training or certification in software engineering concepts and 10+ years of applied experience.
• Experience operating in a regulated organization with a 3rd Line of Defense model.
• Technical understanding of Public Cloud computing (GCP/AWS) and security controls for data protection.
• Proficient in database encryption techniques for data at rest and in transit.
• Proficient in database access control mechanisms, including RBAC and FGAC.
• Experience with database auditing and monitoring solutions for security breach detection.
• Proficient in database vulnerability assessment and penetration testing methodologies.
• Experience with secure database architecture design and database hardening techniques.
• Knowledge of database backup, recovery, and disaster recovery strategies.
• Experience integrating database security with IAM systems, including SSO and MFA.

Nice-to-haves

• Knowledge of industry-specific database security standards and regulations such as HIPAA, PCI-DSS, and GDPR.
• Ability to lead ad hoc teams for control architecture and design.
• Experience translating policy or regulatory requirements into control design for software engineers.
• Experience in financial services consumer businesses.

Benefits

• Health insurance
• Tuition reimbursement
• Retirement plan