Tech Risk Assurance Lead

6 months ago

Bournemouth, United Kingdom JPMorgan Chase & Co. Full time

The Cybersecurity & Technology Controls group at JPMorgan Chase aligns the firm’s cybersecurity, access management, controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group’s number one priority is to enable the business by keeping the firm safe, stable and resilient.

As the Cybersecurity Assurance Cyber Risk Pillar Lead the primary responsibility is to support the cybersecurity standards construct for Cybersecurity Assurance. Aligned to the key security areas within the Cybersecurity Cyber Risk Pillar you will focus on governance and compliance of regulatory and control obligations for the Cybersecurity of the firm including such disciplines as SIEM, DLP, Digital Forensics, Network Telemetry and File Analysis, Cyber Intel, Vulnerability Management, Attack Simulation, Security Configuration, and Endpoint Detection and Response. You will play an important role in securely enabling the firm through managing the risk profile, and aligning cybersecurity and technology controls requirements and product capabilities. The Cybersecurity Assurance Cyber Risk Pillar Lead is responsible for coordinating the organization, framework, program, and approach for the JPMC security architecture, policies, standards, risk assessments, monitoring, and certification around technology. This role engages in areas of development, design, and monitoring of corporate and global control programs, and acts as a liaison between management, the Lines of Business, internal and external audit, and regulators. The key focus of this role will be to lead a team of professional cybersecurity experts in the areas of Security Operations (SIEM, DLP, Digital Forensics, Attack Simulation, Fraud Intel, Threat Intel, and Cybersecurity Incident management and Attack Analysis).
 

Job responsibilities

Investigation, analysis, documentation, remediation, tracking, and reporting of technology risks and associated controls Design and development of control requirements based on new and emerging technological solutions in a measurable way Ensure existing and new solutions are designed to be continuously compliant with JPMC policies and standards Collaborate with team members and stakeholders on firm-mandated, cross-LOB, and regional audits where the CDA is engaged Provide strategic drive for engagement efficiency, effectiveness and transparent, measurable, sustainable control improvements, including process enhancements and use of automated data collection techniques Define and proactively monitor Key Risk Indicators to identify non-compliance and assist in remediation with compensating controls to address security, risk and control gaps Advise on material remediation activities ensuring appropriate resolution of issues, action plans, breaks, and remedies and support the closure verification process Aid in training and spreading technology risk and control awareness within the organization Develop and maintain strong business and technology relationships, becoming a trusted partner  Communicate risk and other control findings with key stakeholders, develop recommendations and provide accurate metrics and management reports on a timely basis Maintain an in depth understanding of the Cybersecurity Operations Technology areas consisting of Security Configuration, Security Operations and Vulnerability Management Support risk decisions for product roadmap prioritization and control implementations supported by documentation and substantiated evidence. Manage the risk profile of aligned products, and translate risks into functional requirements, non-functional requirements and constraints together with the LOB business partners, Cyber Architecture and Product Management teams Ensure that all pertinent Information Risk and Control regulatory requirements and applicable JPMC policies are understood by LOB business partners, technologists, and the Information Security Management function team members, and that these policies are implemented and monitored successfully Work with technology teams to walkthrough, gather control design requirements facilitate discussions and bring to closure control issues Lead the efforts to create and manage agile process for controls related assessment, and build automation/self service capabilities for analysis, reporting and reusing of information to address control issues Communicate issues and evaluate issues/findings and best practices with the rest of the team and management Effectively create, maintain and communicate operational metrics and status of control related initiatives and issues
 

Required qualifications, capabilities, and skills

Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies  Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity Noted cybersecurity expert, keeping technical skills current and participating in multiple forums Expertise in Agile and can work with at least one of the common frameworks Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with focus on recommendations for enhancements or remediation Candidates with a minimum 10+ years of experience in technology risk and controls, risk based consulting, risk assessments, audit and regulatory activities Bachelor's degree in Computer Science, Management Information Systems, Accounting Information Systems, or a related field is required. Experience within financial services areas is preferred Experience with implementation and oversight of technology risk and controls, coordination of activities for audits and assessing an IT controls environment Detail oriented with ability to evaluate processes, controls and issues to determine the risks Bachelor's degree preferably in Computer Science or Information Technology or equivalent CISSP/CRISC/CISM or equivalent industry certifications Subject matter expert on information security and technology risk management with understanding of IT control policies preferred
 

Preferred qualifications, capabilities, and skills

Ability to maintain high standards with a drive to achieve the right answer in difficult and/or ever changing situations Subject matter expert on technology risk management with complete understanding of IT control policie Proven ability to examine, improve and execute the organization's existing processes and procedures for risk assessment Able to review, understand, and rely on technical and software documentation and apply that knowledge into practice Experience operating in environments that are heavily governed under compliance, regulatory, or risk reduction controls Stakeholder engagement skills, including ability to interact with senior levels of management Knowledge of process-focused methodologies for IT related activities (Networks, Cloud, Change Management, Incident Management, SDLC) Knowledge of industry-standard risk/control frameworks: ITIL, COSO, NIST, PCI-DSS, COBIT, etc. Proficient verbal and written communication skills, including the ability to effectively lead discussions and meetings with internal management, external / internal audit, peer groups, regulators and senior stakeholders Ability to prioritize and work under stringent timelines Ability to lead within a cross line of business technology organization, empower people, build rapport, garnering respect and appropriately exercising authority in a collaborative cross-cultural environment
 

  • Strategic Risk Management Lead

    2 weeks ago

    Bournemouth, Bournemouth, United Kingdom undisclosed Full time

    Tech Risk & Controls Lead RoleJob SummaryAt undisclosed, we are seeking a highly skilled and experienced Tech Risk & Controls Lead to play a pivotal role in mitigating tech risks and upholding operational excellence. The successful candidate will drive innovation in risk management, providing subject matter expertise and technical guidance to...

  • Tech Risk and Controls Senior Associate

    6 months ago

    Bournemouth, United Kingdom JPMorgan Chase & Co Full time

    **JOB DESCRIPTION** Join our dynamic team to navigate complex risk landscapes and fortify technology governance, making a pivotal impact in our firm's robust risk strategy. As a Tech Risk & Controls Senior Associate in Cybersecurity & Tech Controls, you will contribute to the successful management of technology-aligned aspects of Governance, Risk, and...

  • Technology Risk Management Lead

    1 month ago

    Bournemouth, Bournemouth, United Kingdom JPMorganChase Full time

    About the RoleAs a Technology Operational Risk Management Lead, you will play a critical role in ensuring the effective management of technology risks within JPMorgan Chase. You will be responsible for evaluating and identifying control design and/or execution deficiencies in the Governance, Risk and Controls (GRC) team's delivery of risk & controls...

  • Quality Assurance Specialist

    4 weeks ago

    Bournemouth, Bournemouth, United Kingdom learndirect Limited Full time

    Quality Assurance OfficerJoin learndirect Limited, the UK's leading online learning provider, in a challenging and rewarding role as a Quality Assurance Officer. As a key member of our team, you will play a crucial part in ensuring the high quality of our customer journeys and compliance with regulatory frameworks.Key Responsibilities:Monitor and score...

  • Product Manager

    4 weeks ago

    Bournemouth, Bournemouth, United Kingdom Areti Group | B Corp™ Full time

    Product Manager OpportunityAreti Group is partnering with a cutting-edge tech startup to find a skilled Product Manager. This remote role offers a unique chance to work with a talented team and contribute to the development of innovative products.As a Product Manager, you will be responsible for leading the product development lifecycle, ensuring timely...

  • Risk Management Strategist

    4 weeks ago

    Bournemouth, Bournemouth, United Kingdom JPMorganChase Full time

    Job SummaryAs a Tech Risk & Controls Lead in CyberSecurity & Technology Controls line of business, you will be responsible for identifying and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented...

  • Risk Administrator

    6 months ago

    Bournemouth, United Kingdom OnBuy Full time

    **Who are OnBuy?** OnBuy are an online marketplace who are on a mission of being the best choice for every customer, everywhere. We have recently been named one of the UK's fastest-growing tech companies in Deloitte's Technology Fast 50 for the third year in a row (as well as 'Fastest-Growing Tech Business in the South West'). All achievements we are very...

  • Technology Risk and Control

    5 months ago

    Bournemouth, United Kingdom JPMorgan Chase & Co Full time

    **JOB DESCRIPTION** Vice President (603)** Tech Risk & Controls professionals play a critical role in the identification, assessment, oversight, monitoring, and reporting of compliance and operational risk in line with the firm’s standards. They are accountable for supporting and advising technology-aligned process owners in managing operational aspects...

  • Head of Cybersecurity and Risk Management

    1 month ago

    Bournemouth, Bournemouth, United Kingdom https:jobs-redefined.cositemap Full time

    Job Title: Head of Cybersecurity and Risk ManagementJoin our team in a pivotal role where your expertise in cybersecurity and risk management shapes our global tech resilience.About the RoleWe are seeking a highly skilled and experienced Head of Cybersecurity and Risk Management to lead our Cybersecurity and Technology Controls group. As a key member of our...

  • Insurance Risk Specialist

    3 days ago

    Bournemouth, Bournemouth, United Kingdom Vitality Corporate Services Limited Full time

    **Company Overview**Vitality Corporate Services Limited is a leading provider of corporate insurance solutions. We are committed to helping businesses mitigate risk and achieve their goals.Estimated Salary: £60,000 - £80,000 per annumJob DescriptionWe are seeking an experienced Insurance Risk Specialist to join our team in Bournemouth. The successful...

  • Insurance Risk Management Specialist

    4 weeks ago

    Bournemouth, Bournemouth, United Kingdom Insurance Australia Group Limited Full time

    We're seeking a skilled Insurance Risk Management Specialist to join our team. As a key contributor to managing risk, initiative, and operational performance, you'll ensure effective sequencing, scheduling, and planning of platform activities.This is an exciting opportunity to drive challenging discussions that inform business decisions and influence...

  • Project Implementation Lead

    4 weeks ago

    Bournemouth, Bournemouth, United Kingdom https:jobs-redefined.cositemap Full time

    This is an exciting opportunity to join JPMorgan as a Project Implementation Lead. The Tech Strategy and Architecture Governance team within Infrastructure Platforms (IP) Architecture fulfills the Global Technology Operating Committee (GTOC) mandate of federated architecture governance, providing a governance framework and management tools.As a Project...

  • Vice President

    6 months ago

    Bournemouth, United Kingdom JPMorgan Chase & Co. Full time

    The Cybersecurity and Technology Controls Assurance organisation is comprised of highly skilled and passionate cybersecurity professionals whose mission is to create a shared understanding of firmwide tech, data and cyber risk enabling our business and customers to make risk-informed decisions.  As a Vice President - Third-Party Cybersecurity Assessor...

  • Quality Assurance Professional

    2 weeks ago

    Bournemouth, Bournemouth, United Kingdom learndirect Limited Full time

    Careers at LearndirectWe are seeking a Quality Assurance Professional to support our ongoing commitment to high-quality customer journeys and compliance adherence.The successful candidate will monitor and score customer journeys against internal and external frameworks, ensuring legal and Financial Compliance Authority (FCA) regulatory compliance frameworks...

  • High-Tech Isolation Specialist

    3 days ago

    Bournemouth, Bournemouth, United Kingdom Bilfinger Full time

    High-Tech Isolation SpecialistBilfinger UK is a leading engineering and maintenance provider, supporting customers across various industries. With a strong focus on enhancing asset efficiency and reducing maintenance costs, we help our clients achieve high levels of availability.The ideal candidate for this position will possess TICA gold card certification...

  • Risk Reporting Specialist

    4 weeks ago

    Bournemouth, Bournemouth, United Kingdom JPMorganChase Full time

    This is an exciting opportunity to play a key role in ongoing regulatory compliance and enhancing the organization's risk reporting framework, working with a dynamic and diverse team of professionals.Key ResponsibilitiesExpand JPM's Risk Reporting framework in line with the Basel Committee on Banking Supervision (BCBS) 239 standards.Collaborate with multiple...

  • Senior Risk and Compliance Business Partner

    21 hours ago

    Bournemouth, United Kingdom CV-Library Full time

    About The Role Team – Risk Working Pattern - Hybrid – 2 days per week in either the Vitality Bournemouth or London Offices. Full time hours. We are happy to discuss flexible working! What this role is all about: To support the UK Group Heads of Risk, the UK Group Compliance Director and the UK Group Chief Risk Officer in the...

  • Senior Quality Assurance Specialist

    3 days ago

    Bournemouth, Bournemouth, United Kingdom Defence Full time

    About the RoleWe are seeking a highly skilled Senior Quality Assurance Specialist to join our team at Defence & Security. As a key member of our quality assurance team, you will play a vital role in ensuring that our products meet the highest standards of quality and safety.Job DescriptionThe Senior Quality Assurance Specialist will be responsible for...

  • Medical Insurance Risk Evaluator

    4 weeks ago

    Bournemouth, Bournemouth, United Kingdom Vitality Full time

    Role OverviewVitality is a multi-award-winning UK insurance brand, committed to making the world a healthier, happier place.We're seeking an experienced Medical Insurance Risk Evaluator to join our Underwriting & Claims team.This role can be worked remotely if desired, and we're happy to discuss flexible working arrangements.As a Medical Insurance Risk...

  • Quality Assurance Specialist

    3 weeks ago

    Bournemouth, United Kingdom AndRecruit Group Ltd Full time

    Job Title: Quality Assurance SpecialistWe are seeking a Quality Assurance Specialist to join our team at AndRecruit Group Ltd. The successful candidate will have extensive experience in Quality Assurance and a strong understanding of the ISO 9001 standard.The Quality Assurance Specialist will be responsible for developing and maintaining the Quality...