JPMorgan Chase - Jersey City, NJ
posted about 2 months ago
Full-time - Mid Level
Jersey City, NJ
10,001+ employees
Credit Intermediation and Related Activities
About the position
As a Tech Risk Assurance Lead in the Cryptography Services and Data Loss Prevention team within the Cyber Risk Pillar, you will provide expert technical risk assurance and control oversight to ensure the firm's products and lines of business achieve their objectives while effectively managing risk. Your role will involve working with cross-functional teams to identify, assess, and mitigate emerging risks and vulnerabilities, significantly impacting the firm's operations and public image. You will contribute to the development and implementation of comprehensive risk management policies, standards, and controls, fostering a robust risk culture and catalyzing continuous improvement.
Responsibilities
- Progress the Product Operating Model by partnering with stakeholders across the organization to develop Control Procedures for their respective cryptographic implementations
- Partner with stakeholders across the firm to develop dynamic and continuous automated measurements of controls across in-scope infrastructure and application assets
- Contribute to the firmwide Cryptography Standards, Control Objectives, and Control Procedures (e.g., encryption at rest / in transit, cryptographic key lifecycle management)
- Oversee the Cryptography Services Executive and Functional Operational Metrics, enabling JPMC to proactively measure, assess, inform, and improve cybersecurity and technology risk firmwide
- Lead comprehensive risk assessments to identify potential threats and vulnerabilities in the Firm's processes, systems, and operations, developing risk mitigation strategies
- Advise stakeholders on risk management, controls development and adherence to mitigate risks
- Engage with regulators, clients, and stakeholders on risk-related issues, providing necessary oversight, ensuring compliance with laws, regulations, and alignment to standards (e.g., PCI Data Security Standards)
Requirements
- 5+ years of experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on risk assessment and control evaluation
- Strong proficiency in Cryptography / Data Protection (including encryption and key management), risk management & controls, security governance, and analytical thinking
- Demonstrated expertise in regulatory compliance, risk management frameworks, and industry best practices (e.g., NIST, ISO, FFIEC, GDPR)
- Understanding of the external threat landscape, threat actors, adversary tactics & techniques, and industry trends
- Strong written and verbal communication skills with ability to effectively communicate and present cybersecurity risk concepts with business and technology partners
Nice-to-haves
- CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications are preferred
- Cloud knowledge across multiple providers (e.g. AWS, GCP, Oracle) and services (SaaS, PaaS, IaaS)
Benefits
- Health insurance
- Retirement plan
- Tuition reimbursement
