Tech Risk Assurance Lead-vulnerability Mgmt Risk

2 weeks ago


Houston, United States JPMorgan Chase & Co Full time

**JOB DESCRIPTION** Description**

The Cybersecurity & Technology Controls group at JPMorgan Chase aligns the firm’s cybersecurity, access management, controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group’s number one priority is to enable the business by keeping the firm safe, stable and resilient.

As the Cybersecurity Assurance Cyber Risk Pillar Subject Matter Expert (SME) the primary responsibility is to support the cybersecurity domain construct for Cybersecurity Assurance. You will play an important role in securely enabling the firm through managing the risk profile and aligning cybersecurity and technology controls requirements and product capabilities.

**Key Responsibilities**:

- Develop and implement technology risk management strategies, policies, and processes to identify, assess, and mitigate risks, and drive strategic projects and initiatives to enhance the firm's technology risk management capabilities, in line with industry best practices and the firm's standards and regulatory requirements
- Define and proactively monitor Key Risk Indicators to identify non-compliance and assist in remediation with compensating controls to address security, risk and control gaps
- Maintain knowledge of Vulnerability Management Control Objectives, driving requirements for Cyber Risk Pillar into process
- Support risk decisions for product roadmap prioritization and control implementations supported by documentation and substantiate evidence.
- Manage the risk profile of aligned products, and translate risks into functional requirements, non-functional requirements and constraints together with the Line of business partners and GT Product Lines
- Identify and escalate emerging and upstream technology risk through execution of the Firm’s management framework tools, including risk event management, reporting, and action plan tracking, and provide expert counsel to stakeholders and constituents regarding their security obligations, facilitating acceptable outcomes
- Manage reporting and governance of overall controls, policies, issue management, and measurements, etc., providing insight to senior leaders into effectiveness of controls and inform governance work
- Engages in areas of technology architecture, technology design, development, and monitoring of global control programs and acts as a liaison between management, lines of business, internal and external audit, and global regulators.

**Required qualifications, capabilities, and skills**
- Formal training or certification and 5+ years of experience in technology risk management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation
- Experience supporting regulatory engagements primarily aligned to the FFIEC Architecture, Infrastructure, and Operations (AIO) and Information Security handbooks.
- Demonstrated expertise in risk management frameworks, industry standards, and regulatory requirements relevant to the financial industry that include NIST, MITR ATT&CK, and others.
- Strong knowledge in the Vulnerability Management risks and controls
- Proven ability to coordinate large teams, manage cross-functional projects, influence executive-level strategic decision-making, and effectively translate technology insights to business strategy in communications with senior executives
- Advanced knowledge and experience leading data security, risk assessment & reporting, and control evaluation, design, and governance, with a track record of implementing effective risk mitigation strategies.

**Preferred qualifications, capabilities, and skills**
- Ability to maintain high standards with a drive to achieve the right answer in difficult and/or ever changing situations
- Subject matter expert on technology risk management with complete understanding of IT control policies

**ABOUT US**

JPMorgan Chase & Co., one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set, and location. For those in eligible roles, we offer discretionary incentive compensation which may be awarded in recognition of firm performance and individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits incl



  • Houston, United States Baldwin Risk Partners Full time

    Insgroup is an award-winning entrepreneur-led and inspired insurance brokerage firm delivering expertly crafted Commercial Insurance and Risk Management, Private Insurance and Risk Management, Employee Benefits and Benefit Administration, Asset and Income Protection, and Risk Mitigation strategies to clients wherever their passions and businesses take them...


  • Houston, United States Invesco Full time

    As one of the world’s leading asset managers, Invesco is dedicated to helping investors worldwide achieve their financial objectives. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work,...


  • Houston, TX, United States JP Morgan Chase Full time

    Join a role that's central to our technological resilience, offering a unique opportunity to shape the firm's tech risk strategy and enhance industry compliance. As a Tech Risk & Controls Director in the Cyber and Tech Controls line of business, you will play a pivotal role in shaping and implementing the firm's technology risk management strategy....


  • Houston, United States JPMorgan Chase & Co Full time

    **JOB DESCRIPTION** Join a role that's central to our technological resilience, offering a unique opportunity to shape the firm's tech risk strategy and enhance industry compliance. As a Tech Risk & Controls Director in the Cyber and Tech Controls line of business, you will play a pivotal role in shaping and implementing the firm's technology risk...


  • Houston, United States Invesco Full time

    As one of the world's leading asset managers, Invesco is dedicated to helping investors worldwide achieve their financial objectives. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work,...

  • Risk Manager

    3 weeks ago


    Houston, TX, United States Robert Half Full time

    DescriptionJob DescriptionJob Title: Risk ManagerLocation: North Houston, TexasPosition Overview:We are seeking a highly skilled and experienced Risk Manager to join our team in North Houston! As a leading player in the transportation industry, we understand the critical role that risk management plays in ensuring the safety, security, and profitability of...

  • SR IT Risk Analyst

    2 weeks ago


    Houston, United States Lone Star Staffing Solutions Full time $115,000 - $130,000

    Are you looking for your next big adventure as a Senior IT Risk Analyst? If you answered YES, apply to be a part of a growing team of professionals assessing & executing the IT risk management processes for our Houston-based client. Our client is a leader in their industry with significant YOY growth. Our client is moving to a HYBRID on-premise and...

  • Risk Manager

    2 weeks ago


    North Houston, United States Robert Half Full time

    Position Overview:We are seeking a highly skilled and experienced Risk Manager to join our team in North Houston! As a leading player in the transportation industry, we understand the critical role that risk management plays in ensuring the safety, security, and profitability of our operations. The ideal candidate will possess a combination of trucking...

  • Risk Manager

    3 weeks ago


    North Houston, United States Robert Half Full time

    Position Overview:We are seeking a highly skilled and experienced Risk Manager to join our team in North Houston! As a leading player in the transportation industry, we understand the critical role that risk management plays in ensuring the safety, security, and profitability of our operations. The ideal candidate will possess a combination of trucking...

  • Risk Manager

    4 weeks ago


    Houston, United States INTECSEA Full time

    ACCOUNTABILITIES: The duties and responsibilities for this role are as follows: - Create guidelines for the creations of risk management plans for projects of different types, sizes and complexity; - Mentor and coach risk managers on projects; - Develop training plan for risk managers; - Coordinate delivery of training for risk managers; - Coordinate...


  • Houston, United States St. Joseph Medical Center Full time

    Effectively synthesizes risk management events, reports, and insurance claims. Interfaces with senior leaders, physicians, nursing staff and hospital staff to identify organizational vulnerabilities and intervene appropriately. Directs and advises internal and external clients in a manner consistent with the established risk management plan and excellent...


  • Houston, United States Strategic Staffing Solutions Full time

    Cybersecurity Risk Consultant Houston, TX 12 Months. We are currently seeking a highly skilled and motivated Cyber Risk Consultant with experience in cyber security and cyber risk management to join our dynamic team. This role involves working closely with both the IT department and business units to ensure that our cyber security measures...


  • Houston, United States Alfa Laval Full time

    Join us as a Supplier Risk & Compliance Lead at Alfa Laval. You will be overall responsible to identify and assess supplier risk and manage supplier compliance activities in the region, lead global projects, process development, and activities in accordance with the sourcing strategy and the sustainability agenda. You will be part of the Sourcing...

  • Supplier Risk

    6 days ago


    Houston, Texas, United States Alfa Laval Full time

    Join us as a Supplier Risk & Compliance Lead at Alfa Laval. You will be overall responsible to identify and assess supplier risk and manage supplier compliance activities in the region, lead global projects, process development, and activities in accordance with the sourcing strategy and the sustainability agenda. You will be part of the Sourcing...

  • Lead Commodity Risk

    1 month ago


    Houston, United States bp Full time

    Job summary **Entity**: Finance **Job Family Group**: Finance Group About us Our purpose is to bring together people, energy and markets to power and navigate a changing world. In a time of constant change and possibility we need new talent to pursue commercial opportunities, fueled by world-class insight and expertise. We’re always striving for more...


  • Houston, Texas, United States Lyondell Basell North America Full time

    LyondellBasellBasic FunctionThe Global Projects Risk Management (GPRM) function is responsible for the implementation and integration of risk management at all phases throughout capital projects and turnarounds. This includes providing independent risk management support to our Global Projects and Global Turnaround teams which undertake a large portfolio of...


  • Houston, Texas, United States Lyondell Basell North America Full time

    LyondellBasellBasic FunctionThe Global Projects Risk Management (GPRM) function is responsible for the implementation and integration of risk management at all phases throughout capital projects and turnarounds. This includes providing independent risk management support to our Global Projects and Global Turnaround teams which undertake a large portfolio of...


  • Houston, United States Lyondell Basell North America Full time

    LyondellBasell Basic Function The Global Projects Risk Management (GPRM) function is responsible for the implementation and integration of risk management at all phases throughout capital projects and turnarounds. This includes providing independent risk management support to our Global Projects and Global Turnaround teams which undertake a large portfolio...

  • Risk Analyst

    1 day ago


    Houston, United States Tricon Energy Full time

    **Overview** It’s an exciting time to work at Tricon - come discover why we’ve been certified as a Great Place to Work®! Our business has been built on a foundation of perseverance, teamwork, and some of the industry’s top talent. Tricon’s company philosophy is rooted in a culture of independence and accountability, and we’re looking for...

  • Technology Risk

    2 days ago


    Houston, United States JPMorgan Chase & Co Full time

    **JOB DESCRIPTION** Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management. **Job responsibilities** - Ensure effective identification, quantification, communication, and management of technology risk, focusing on root cause analysis and resolution recommendations - Develop...