JPMorgan Chase
Tech Risk & Controls Lead - Third-Party Risk
$147K–$200K
Wilmington, DE +2 · Full-time · Posted Oct 19, 2026
- Location
- Wilmington, DE
Columbus, OH
Jersey City, NJ - Experience
- 7+ years in third-party risk management, cybersecurity, technology risk, or related disciplines, and/or a bachelor's degree in a related field.
- Education
- Bachelor's degree in Information Security, Cybersecurity, Risk Management, Business Administration, or a related field is listed as an alternative to the experience requirement. A related master's degree is preferred.
About the job
Leads third-party technology risk assessments and strengthens controls across corporate applications, reporting risk insights and advising stakeholders on mitigation and regulatory compliance.
What you'll do
- Conduct third-party risk assessments and contract deviation reviews across applications throughout their lifecycle.
- Evaluate risks, findings, and control effectiveness; recommend resolutions and improvements to the control environment.
- Coordinate with internal teams and vendors, and deliver risk reports and metrics to stakeholders.
What they ask for
- Formal training or certification in technology risk and controls concepts.
- 7+ years of experience in third-party risk management, cybersecurity, technology risk, or related disciplines, and/or a bachelor's degree in a related field.
- Knowledge of third-party risk frameworks, cybersecurity controls, and requirements including OCC, FFIEC, GDPR, ISO 27001, and NIST.
- Experience using enterprise-authorized AI in risk workflows, including validating outputs and handling sensitive data appropriately.
Nice to have
- CTPRP, CISSP, CISM, or CRISC certification.
- Experience in a highly regulated industry or conducting AI and machine learning technology risk assessments; master's degree in a related field.
Pay
$147,250.00-$200,000.00 USD base salary
Tools
OCC, FFIEC, GDPR, ISO 27001, NIST
AI focus
Uses enterprise-authorized AI to synthesize risk and control evidence and draft executive-ready reporting; validates AI-assisted summaries and recommendations. AI and machine learning technology risk assessment experience is preferred.
Model-written summary · the original posting is authoritative