JPMorgan Chase
Tech Risk and Controls Lead
$147K–$200K
Jersey City, NJ +2 · Full-time · Posted Oct 23, 2026
- Location
- Jersey City, NJ
Brooklyn, NY
Plano, TX - Experience
- 10+ years of applied experience; formal training or certification in assessments and exercises concepts is also required.
- Education
- Bachelor’s degree in Computer Science, Management Information Systems, Accounting Information Systems, or a related field.
About the job
Leads PCI assessments and compliance validation, partnering with assessors and internal stakeholders to identify risks, guide remediation, and report control findings.
What you'll do
- Manage concurrent PCI assessments, including scope, documentation, deadlines, and coordination with external QSAs.
- Identify compliance gaps, support remediation and closure verification, and develop compensating controls where needed.
- Communicate findings and recommendations, provide metrics and reporting, and use AI and automation to improve assessment processes.
What they ask for
- Formal training or certification in assessments and exercises concepts, with 10+ years of applied experience.
- Expertise in technology risk and controls, risk assessments, audit, and regulatory activities, especially PCI DSS.
- Knowledge and practical experience across technology infrastructure and PCI DSS requirements, including technology risk and controls implementation and oversight.
- Bachelor’s degree in Computer Science, Management Information Systems, Accounting Information Systems, or a related field.
Nice to have
- Experience in compliance-, regulatory-, or risk-control-heavy environments, preferably financial services.
- Working knowledge of COSO, COBIT, NIST Cybersecurity Framework, and ITIL.
Pay
USD $147,250.00-$200,000.00 base salary (Jersey City, NJ); USD $147,250.00-$200,000.00 base salary (Brooklyn, NY)
Tools
PCI DSS, COSO, COBIT, NIST Cybersecurity Framework, ITIL, Change Management, Incident Management, Software Development Lifecycle (SDLC)
AI focus
Leverage artificial intelligence, automation, and emerging technologies to improve assessment efficiency, documentation quality, risk identification, and compliance processes.
Model-written summary · the original posting is authoritative