Are you ready to make a real impact in digital banking? Join our innovative team at JPMorgan Chase as we launch Chase Germany and revolutionize mobile banking. You’ll be part of a diverse, collaborative environment where your ideas and expertise drive meaningful change. We offer unparalleled opportunities for career growth, skill development, and the chance to work with cutting-edge technology. Your contributions will help build the bank of the future and deliver exceptional experiences to millions of customers.

As a Technology Risk & Controls Lead in the Cybersecurity & Technology Controls team, you will analyze, consolidate, and support the production of reports on trends and metrics for a range of audiences, including management and external regulators. You will articulate cyber and technology risks, working closely with technical and non-technical control owners to drive actionable remediation. In this role, you will collaborate with stakeholders in a dynamic technical environment, helping to shape the future of digital banking in Germany. You will have the opportunity to grow your expertise and make a significant impact on our team and customers.

Job responsibilities

Lead and mature cyber risk management activities across consumer banking products, providing thought leadership and guidance.
Ensure technology risk is identified, quantified, communicated, and managed, including root cause analysis and recommendations.
Develop, monitor, and report on cybersecurity KPIs and KRIs to enhance technology control effectiveness.
Support and review technology controls against requirements, policy statements, and regulatory standards.
Analyze and report on compliance at the LoB, firmwide, and regulatory levels.
Build and maintain strong relationships with stakeholders, technology teams, and corporate functions.
Facilitate oversight and business-as-usual risk activities.
Deliver effective reporting on technology control performance.
Collaborate with cross-functional teams to drive continuous improvement.
Communicate complex technology and security risks to non-technical audiences.
Mentor and support junior staff in risk management best practices.

Required qualifications, capabilities, and skills

Bachelor’s degree or equivalent combination of education and relevant experience.
8 years of relevant work experience in IT and cybersecurity controls.
Expertise in banking regulations, EBA Guidelines on ICT and Security Risk Management, DORA, ISO27001, GDPR, and NIST frameworks.
Experience with IT risk management operating models and three lines-of-defense frameworks.
Proficiency in Cloud technologies and modern engineering practices, including containerization, chaos engineering, and CI/CD security.
Advanced knowledge of information security domains, including risk and control assessments, access controls, regulatory compliance, technology resiliency, incident management, vulnerability management, third-party risk management, and data protection.
Strong analytical skills and ability to deliver measurement and reporting for continuous improvement.
Excellent communication skills and ability to collaborate with diverse teams.
Technical understanding of Cloud and on-prem computing (Public – GCP & AWS, Private, Hybrid).
Self-motivated with a desire to learn and operate on multiple tasks while maintaining high delivery standards.

Preferred qualifications, capabilities, and skills

Certifications in CISA, CISM, CRISC, CISSP, CCSP, AWS, GCP, or similar.
Experience with German regulatory requirements in consumer banking cybersecurity.
Experience operating within a regulated industry.

#CTC

Technology Risk and Controls Lead (Cybersecurity Governance)

Job Description