JP Morgan Chase

Runs a consumer bank and an investment bank

Lead Cybersecurity Architect

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-time$137.8k - $215kIn-person

About the Job

Requirements

Formal training or certification in cybersecurity architecture and at least five years of applied experience.
Hands-on practical experience developing risk visualization capabilities and delivering enterprise-level cybersecurity solutions and controls.
Demonstrated experience using enterprise-authorized AI capabilities in the work environment to support cybersecurity architecture workflows, with strong validation habits and awareness of data sensitivity.
Ability to assess and validate AI-assisted security recommendations before adoption, escalate uncertainty, and ensure outcomes align with security, resiliency, and auditability expectations.
Working knowledge of cybersecurity risk management concepts, including threat, vulnerability, exposure, likelihood and impact, control design versus operating effectiveness, residual risk, and risk appetite or limits.
Deep expertise in one or more programming languages, software applications, or tools.
Proficiency across software development life cycle execution, including automation and continuous delivery practices and agile methodologies such as continuous integration and delivery, application resiliency, and security.
Proficiency in software applications and technical processes within a technical discipline such as public cloud, AI/machine learning, or mobile, including practical cloud-native experience.
Ability to evaluate current and emerging technologies and recommend the best solutions for future-state architecture.
Experience communicating effectively with senior business leaders.

Responsibilities

Leverage enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity architecture analysis and decision-making, such as risk identification and documentation, while validating outputs and handling data according to sensitivity and security requirements.
Define the technical target state of the cybersecurity product and drive achievement of its strategy.
Identify opportunities to eliminate or automate remediation of recurring issues to improve the cybersecurity of software applications and systems.
Lead evaluation sessions with external vendors, startups, and internal teams to probe cybersecurity designs, technical credentials, and applicability within existing systems and cybersecurity architecture.
Lead communities of practice to drive awareness and use of new and leading-edge cybersecurity technologies.
Drive reuse-first adoption of AI-assisted security validation within software development life cycle and toolchain routines, improving control testing and remediation quality with traceability, auditability, and resiliency expectations.
Conduct risk analysis on key metric drivers, including exposure, likelihood, impact, control gaps, and threat trends, and perform root-cause analysis and explanations.
Develop analytics tools and products such as dashboards, metric pipelines, reporting applications, and self-service datasets, using modern engineering practices and agentic coding approaches to turn cybersecurity risk data into decision-ready insights for executives, business information security officer organizations, chief information and technology officers, business stakeholders, and risk committees.
Design data models and pipelines that integrate sources such as security tooling, governance, risk and compliance platforms, asset inventories and configuration management databases, identity and access management systems, ticketing systems, cloud logs, and findings repositories, with controls for data quality, lineage, and repeatability.
Establish and run weekly, monthly, and quarterly analytics operating cadences to support risk reviews, including metric definitions, refresh schedules, exception management, and stakeholder sign-offs.
Automate insight generation where feasible, including anomaly detection, threshold-based alerts, auto-generated narratives, and drill-down workflows, to reduce manual reporting effort.

Join one of the world's most influential companies and leverage your skills in cybersecurity to have a real impact on the financial industry.

As a Lead Cybersecurity Architect at JPMorgan Chase within the Cybersecurity Technology & Controls, you are an integral part of a team that works to develop high-quality cybersecurity solutions for various software applications on modern cloud-based technologies. As a core technical contributor, you are responsible for carrying out critical cybersecurity architecture solutions by identifying, creating, and communicating risk, mitigation options, and solutions across multiple technical areas within various business functions in support of project goals.

Job responsibilities

Leverages enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity architecture analysis and decisioning (e.g., risk identification and documentation), validating outputs and handling data according to sensitivity and security requirements.
Defines the technical target state of their cybersecurity product and drives achievement of the strategy.
Identifies opportunities to eliminate or automate remediation of recurring issues to improve overall cybersecurity of software applications and systems
Leads evaluation sessions with external vendors, startups, and internal teams to drive outcomes-oriented probing of cybersecurity designs, technical credentials, and applicability for use within existing systems and cybersecurity architecture
Leads communities of practice to drive awareness and use of new and leading-edge cybersecurity technologies
Drives reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines, improving control testing and remediation quality with traceability/auditability and resiliency expectations.
Conduct risk analysis on the key drivers behind the metrics (e.g., exposure, likelihood, impact, control gaps, and threat trends), including root-cause analysis and explanations.
Develop analytics tools and products such as dashboards, metric pipelines, reporting applications, and self-service datasets—using modern engineering practices and agentic coding approaches to translate cybersecurity risk data into decision-ready insights for executives (BISO organizations, CIO/CTO leaders, business stakeholders, and risk committees).
Design data models and pipelines that integrate multiple sources (security tooling, GRC platforms, asset inventories/CMDB, IAM, ticketing systems, cloud logs, and findings repositories), with strong controls for data quality, lineage, and repeatability.
Establish and run an analytics operating cadence (weekly, monthly, and quarterly) to support risk reviews, including metric definitions, refresh schedules, exception management, and stakeholder sign-offs.
Automate insight generation where feasible (anomaly detection, threshold-based alerts, auto-generated narratives, and drill-down workflows) to reduce manual reporting effort.

Required qualifications, capabilities, and skills

Formal training or certification on cybersecurity architecture and 5+ years applied experience
Hands-on practical experience in developing risk visualization capabilities and delivering enterprise level cybersecurity solutions and controls
Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.
Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
Working knowledge of cybersecurity risk management concepts: threat, vulnerability, exposure, likelihood/impact, control design vs. operating effectiveness, residual risk, risk appetite/limits.
Deep expertise in one or more programming language(s), software(s), and/or applications
Proficient across SDLC execution, including automation/continuous delivery practices and agile methodologies such as continuous integration/delivery, application resiliency, and security
Demonstrated proficiency in software applications and technical processes within a technical discipline (e.g., public cloud, AI/ML, mobile, etc.), including practical cloud-native experience
Ability to evaluate current and emerging technologies to recommend the best solutions for the future state architecture
Experience effectively communicating with senior business leaders

#CTC

Base Pay/Salary: Jersey City,NJ $156,750.00-$215,000.00; Chicago,IL $137,750.00-$185,000.00; Palo Alto,CA $156,750.00-$215,000.00; San Francisco,CA $156,750.00-$215,000.00

About the Company

JP Morgan Chase

Runs a consumer bank and an investment bank

JPMorgan Chase runs the largest bank in the United States, which serves households and small businesses as Chase and large companies, governments, and investors as J.P. Morgan. During the 2008 financial crisis it bought the failing investment bank Bear Stearns and lender Washington Mutual, and in 2023 it took over First Republic Bank after regulators seized it. Chase takes deposits and earns interest on credit cards, mortgages, and car loans, while the investment side earns fees for advising on mergers, raising money for companies, trading stocks and bonds, and managing wealth. Formed in a 2000 merger, JPMorgan Chase traces its roots to 1799 and is based in New York City.

Company size: 10,001+
Company stage: IPO
Headquarters: New York City, New York
Founded: 1799

Recently Posted Jobs

Explore more opportunities at JP Morgan Chase

See more jobs