Technology Risk and Controls Lead - International Consumer Business

Job Description
We know that people want great value combined with an excellent experience from a bank they can trust so, after our successful launch in the UK, we're launching our digital bank Chase Germany, to revolutionize mobile banking with seamless journeys that our customers love. We're already trusted by millions in the US and quickly growing in the UK - and now, we're building the bank of the future from the ground up, channeling our start-up mentality every step of the way - meaning you'll have the opportunity to make a real impact as we go live in 2026.
While we're looking for professional skills, culture is just as important to us. We understand that everyone's unique - and that diversity of thought, experience, and background is what makes a good team, great. By bringing people with different points of view together, we can represent everyone and truly reflect the communities we serve in Germany. This way, there's scope for you to make a huge difference - on us as a company, and on our clients and business partners across Europe and around the world.
Our Cybersecurity & Technology Controls team is at the heart of this venture, focused on getting smart ideas into the hands of our customers. We're looking for people who have a curious mindset, thrive in collaborative squads, and are passionate about new cybersecurity frameworks and solutions. By their nature, our people are also solution-oriented, commercially savvy, and have a head for fintech.
As a Technology Risk & Controls Lead at JPMorgan Chase within the International Consumer Bank, you will be part of a flat-structure organization. Your responsibilities will include analyzing, consolidating, and supporting the production of reports on trends and metrics suitable for consumption at varying levels of technical and risk understanding, as well as for all levels of management, including external regulators.
Job summary
We are looking for someone as part of the Cybersecurity & Technology Controls (CTC) organization to analyze, consolidate and support production of reports on trends/metrics suitable for consumption at varying levels of technical and risk understanding, as well as for all levels of management, including external regulators. The successful candidate will need to be able to understand and articulate cyber and technological risks and work with technical and non-technical control owners to derive actionable and measurable remediation tasks.
This role is an opportunity to work with a diverse collection of stakeholders within an exciting technical environment at the leading edge of digital banking and propel your knowledge and experience.
Responsibilities:

• Lead and mature cyber risk management activities across consumer banking products, providing thought leadership and guidance to peers and senior management.
• Ensure technology risk impacting the business is effectively identified, quantified, communicated, and managed, including root cause analysis, recommendations for resolution, and identification of key themes.
• Develop, monitor, and report on cybersecurity-related KPIs and KRIs to assess and enhance the effectiveness of the technology control environment.
• Support and review the effectiveness of technology controls against requirements, policy statements, and regulatory standards, including analysis and reporting on compliance at the LoB, firmwide, and regulatory levels.
• Build and maintain strong relationships with stakeholders, technology teams, and supporting corporate functions to facilitate oversight, business-as-usual risk activities, and effective reporting on the performance of the technology control environment.

Qualifications:

• Advanced knowledge of multiple IT and cybersecurity controls, as well as regulatory requirements, with experience working across large environments.
• Excellent communication skills and the ability to collaborate with high-performing teams and individuals throughout the firm to accomplish common goals.
• Ability to explain complex technology and security risks to non-technical audiences.
• Strong proficiency in MS Office tools and a proven track record of creating high-quality deliverables for both internal and external stakeholders.
• Expertise in information security domains, including policies and standards, risk and control assessments, access controls, regulatory compliance, technology resiliency, risk and control governance and metrics, incident management, secure systems development lifecycle, vulnerability management, third-party risk management, and data protection.
• Strong analytical skills, including the ability to solve and communicate complex problems, perform data analytics, and deliver measurement and reporting needed to drive continuous improvement.
• Expertise in application and infrastructure high-availability and resiliency architectures.

Required:

• Bachelor's degree or the equivalent combination of education and relevant experience and 8+ years of total relevant work experience.
• Expertise in relevant regulations related to banking as well as the EBA Guidelines on ICT and Security Risk Management or the Digital Operational Resilience Act (DORA), and/or ISO27001, GDPR and NIST frameworks.
• Experience with IT risk management operating models, three lines-of-defense frameworks, integrated risk management practices, and/or risk intelligence capabilities.
• Experience working with Cloud and relevant modern engineering practices, such as containerization, chaos engineering and CI/CD security.
• Self-motivated and with a desire to learn.
• Ability to operate on multiple tasks whilst still achieving high delivery standards.
• Technical Understanding of Cloud and on-prem computing (Public - GCP & AWS, Private, Hybrid).

Preferred:

• Certified in CISA, CISM, CRISC, CISSP, CCSP, AWS / GCP certifications or similar
• Experience with German regulatory requirements in Consumer Banking in the cybersecurity domains
• Experience operating within a regulated industry.

When you work at JPMorgan Chase & Co., you are not just working at a global financial institution. You are an integral part of one of the world's biggest tech companies. In 20 technology centers worldwide, our team of 50,000 technologists design, build and deploy everything from enterprise technology initiatives to big data and mobile solutions, as well as innovations in electronic payments, cybersecurity, machine learning, and cloud development. Our $10B+ annual investment in technology enables us to hire people to create innovative solutions that will transform the financial services industry.
At JPMorgan Chase & Co. we value the unique skills of every employee, and we are building a technology organization that thrives on diversity. We encourage professional growth, career development, and offer competitive benefits and compensation. If you are looking to build your career as part of a global technology team tackling big challenges that impact the lives of people and companies all around the world, we want to meet you.
J.P. Morgan offers an exceptional benefits program and a highly competitive compensation package.
J.P. Morgan is an Equal Opportunity Employer.
About Us
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
About the Team
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.