JPMorgan Chase
AI Tech Risk and Controls Lead
$147K–$200K
Palo Alto, CA +1 · Full-time · Posted Aug 5, 2026
- Location
- Palo Alto, CA
San Francisco, CA - Experience
- 5 plus years of experience or equivalent expertise.
About the job
Leads technology risk and controls work for Core Foundational Platforms, strengthening compliance, control effectiveness, and risk reporting while using validated AI-assisted workflows.
What you'll do
- Identify, assess, communicate, and mitigate technology risks, including root-cause analysis and resolution recommendations.
- Govern and monitor controls, policies, issues, and measurements; report on control effectiveness and recommend improvements.
- Partner with stakeholders and use enterprise-authorized AI to support evidence synthesis, reporting, and recurring control workflows, with human review and attention to data sensitivity.
What they ask for
- 5+ years of experience or equivalent expertise in technology risk management, cybersecurity, or a related field, focused on regulatory compliance and risk mitigation.
- Technical proficiency in AI risk governance, platform and application security, AI threats, mitigations, and defenses.
- Knowledge of risk frameworks, industry standards, financial-industry regulatory requirements, data security, risk assessment, control evaluation, design, and governance.
- Experience using enterprise-authorized AI for technology risk and controls workflows; ability to validate AI outputs and influence executive-level decisions.
Nice to have
- CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications.
Pay
USD $147,250.00-$200,000.00 base salary (Palo Alto, CA); USD $147,250.00-$200,000.00 base salary (San Francisco, CA)
AI focus
Uses enterprise-authorized AI to synthesize risk and control evidence, draft executive-ready reporting, and streamline control testing and issue management. Requires validation, human review, and compliance with data sensitivity, security, auditability, and regulatory expectations.
Model-written summary · the original posting is authoritative