JPMorgan Chase
Technology Risk and Control Lead : Application Portfolio
$147K–$200K
Jersey City, NJ +4 · Full-time · Posted Oct 19, 2026
- Location
- Jersey City, NJ
Columbus, OH
Wilmington, DE
Plano, TX
Tampa, FL - Experience
- 5+ years of applied experience with formal training or certification in tech risk and controls concepts; at least 7 years of experience or equivalent expertise in technology risk management, cybersecurity, or a related field.
About the job
Leads technology risk and controls across an application portfolio, assessing control effectiveness and compliance while advising stakeholders and using authorized AI to support risk workflows and reporting.
What you'll do
- Identify, assess, communicate, and mitigate technology risks; analyze root causes and recommend resolutions.
- Assess controls and AI/ML use cases, monitor control effectiveness, and recommend improvements to risk posture and regulatory compliance.
- Govern controls, policies, issues, and reporting; partner across teams and use AI-assisted methods with human review and appropriate data protections.
What they ask for
- Formal training or certification in technology risk and controls concepts.
- At least 7 years of experience or equivalent expertise in technology risk management, cybersecurity, or a related field.
- Experience using enterprise-authorized AI in technology risk and controls workflows, including validating outputs and handling sensitive data appropriately.
- Knowledge of risk frameworks, industry standards, financial regulatory requirements, data security, risk assessment, reporting, and control governance.
Nice to have
- CISSP, CISM, CISA, CRISC, or CCSP certification.
Pay
USD 147,250.00-$200,000.00 base salary
Tools
AI, machine learning
AI focus
Uses enterprise-authorized AI to synthesize risk and control evidence, draft executive-ready reporting, assess AI and machine learning use cases, and streamline recurring controls and issue-management routines, with human review and attention to security and auditability.
Model-written summary · the original posting is authoritative