JPMorgan Chase
Tech Risk and Controls Lead
$147K–$200K
Columbus, OH +2 · Full-time · Posted Oct 20, 2026
- Location
- Columbus, OH
Jersey City, NJ
Plano, TX - Experience
- 5+ years of experience or equivalent expertise.
About the job
Leads technology risk and controls work in Corporate Technology, overseeing risk mitigation, control effectiveness, governance, and reporting while using AI-assisted workflows with human validation.
What you'll do
- Identify, assess, communicate, and manage technology risks, including root-cause analysis and resolution recommendations.
- Govern and report on controls, policies, issues, and control effectiveness; recommend improvements to strengthen compliance and risk posture.
- Partner with technology and business stakeholders and use enterprise-authorized AI to support evidence synthesis, reporting, and recurring controls work, validating outputs and following data-handling requirements.
What they ask for
- 5+ years of experience or equivalent expertise in technology risk management, cybersecurity, or a related field, focused on regulatory compliance and risk mitigation.
- Experience using enterprise-authorized AI for technology risk and controls workflows, with strong validation habits and awareness of data sensitivity.
- Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements.
- Expertise in data security, risk assessment and reporting, control evaluation, design, and governance; ability to influence executive decisions and knowledge of software development best practices.
Nice to have
- CISM, CRISC, CISSP, CISA, or similar industry-recognized risk certifications.
- Application Owner experience.
Pay
$147,250.00-$200,000.00 USD base salary
AI focus
Uses enterprise-authorized AI to synthesize risk and control evidence, draft executive-ready reporting, and streamline recurring control testing and issue/action-plan management; requires human validation, data-sensitivity safeguards, and auditability.
Model-written summary · the original posting is authoritative