Lead Cybersecurity Architect

Play a vital role in shaping the future of an iconic company and make a direct impact in a dynamic environment designed for top achievers.

As a Lead Cybersecurity Architect at JPMorganChase within the Cybersecurity and Technology Controls line of business, you are an integral part of a team that develops high-quality cybersecurity solutions across complex enterprise technologies. As a core technical leader, you will identify and communicate cybersecurity risk, define practical mitigation strategies, influence target-state architecture, and drive security outcomes across multiple technology domains and business functions.

This role will have a particular focus on securing enterprise Collaboration & Communication technologies, including cloud platforms, SaaS services, Microsoft 365, technology integrations, and AI-enabled capabilities. You will partner with engineering, product, architecture, risk, and business teams to shape cybersecurity strategy, perform threat modeling, assess control effectiveness, establish secure and reusable architecture patterns, and drive the secure adoption of modern technologies.

Job responsibilities

• Defines and influences cybersecurity architecture strategy and target-state security patterns across enterprise Collaboration & Communication technologies, cloud platforms, SaaS services, Microsoft 365, AI-enabled capabilities, and strategic technology integrations.
• Engages technical teams and senior business stakeholders to evaluate and recommend technical approaches that address current and future cybersecurity needs.
• Leads cybersecurity architecture and design reviews for complex and strategic technology initiatives, identifying threats, attack paths, control gaps, and cybersecurity risks and driving appropriate mitigation strategies.
• Leads threat modeling, attack-surface analysis, and security architecture assessments across applications, platforms, integrations, and emerging technologies.
• Evaluates cybersecurity risks associated with third-party integrations, APIs, application permissions, authentication and authorization patterns, data flows, external connectivity, and trust boundaries.
• Assesses existing security controls and defines practical mitigation strategies, compensating controls, and reusable security patterns and control baselines where identified threats are not sufficiently mitigated.
• Leads evaluation sessions with external vendors, technology providers, and internal teams to assess cybersecurity architecture, technical capabilities, security controls, and applicability within the firm's technology environment.
• Partners with engineering, product, architecture, and risk teams to translate cybersecurity findings into actionable remediation plans and drive complex issues toward resolution or appropriate risk escalation.
• Identifies opportunities to eliminate, automate, or prevent recurring cybersecurity issues through scalable controls, reusable architecture patterns, tooling, and security-by-design practices.
• Provides technical leadership and direction across teams and serves as a function-wide subject matter expert for complex cybersecurity architecture decisions.
• Leads and contributes to communities of practice that advance cybersecurity architecture standards, frameworks, tools, reusable patterns, and adoption of emerging security technologies.
• Actively contributes to the engineering community as an advocate for firmwide frameworks, tools, and Software Development Life Cycle practices.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity risk analysis, architecture assessment, and control validation, while validating outputs and handling data according to sensitivity and security requirements.
• Drives reuse-first adoption of AI-assisted security validation within SDLC and security toolchain processes to improve control testing, remediation quality, traceability, auditability, and resiliency.

Required qualifications, capabilities, and skills

• Formal training or certification in cybersecurity architecture and 5+ years of applied experience.
• Hands-on practical experience delivering enterprise-level cybersecurity architecture, solutions, and security controls across complex technology environments.
• Demonstrated experience leading complex cybersecurity architecture initiatives and influencing technical decisions across engineering, product, architecture, risk, and business teams.
• Advanced expertise in one or more programming languages and/or applications, with advanced knowledge of cybersecurity architecture and technical processes across one or more disciplines such as public cloud, SaaS, AI/ML, application security, or enterprise collaboration technologies.
• Hands-on experience conducting and leading threat modeling, attack-surface analysis, security architecture assessments, and security design reviews.
• Demonstrated ability to identify threats, control gaps, and cybersecurity risks and define scalable mitigation strategies, security patterns, and target-state solutions.
• Strong understanding of modern cloud security concepts, including identity and access management, authentication and authorization, application and API security, data protection, logging and monitoring, external connectivity, and trust boundaries.
• Ability to evaluate current and emerging technologies and define or influence future-state cybersecurity architecture and security strategy.
• Ability to interpret complex architecture diagrams and data flows, evaluate control effectiveness, and communicate cybersecurity risks and recommendations to engineering, product, architecture, risk, and senior leadership stakeholders.
• Ability to independently lead complex design, architecture, and security problems with minimal oversight and drive issues toward resolution.
• Proficiency in automation, continuous delivery methods, and Software Development Life Cycle practices, with an understanding of Continuous Integration/Delivery, application resiliency, and security.
• Demonstrated experience using enterprise-authorized AI capabilities to support cybersecurity architecture workflows, with strong validation practices and awareness of data sensitivity.
• Ability to assess and validate AI-assisted security recommendations before adoption, escalate uncertainty, and ensure outcomes align with security, resiliency, traceability, and auditability expectations.

Preferred qualifications, capabilities, and skills

• Experience securing enterprise cloud and SaaS environments, including assessing architecture, data flows, identity, access, integrations, and security controls across third-party services.
• Security architecture experience across major cloud platforms, including AWS, GCP, and Microsoft Azure, with an understanding of cloud-native security controls and shared responsibility models.
• Experience evaluating SaaS integrations, APIs, OAuth applications, service principals, application identities, and machine-to-machine authentication from a security and risk perspective.
• Experience with Microsoft 365 security architecture, including technologies such as Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, Microsoft Entra ID, Microsoft Graph, Microsoft Purview, Microsoft Defender, and Microsoft Copilot.
• Experience securing AI/ML and LLM-enabled applications, agents, and emerging AI capabilities, including risks associated with data access, permissions, external integrations, third-party model dependencies, and emerging agentic architectures.
• Experience developing and driving adoption of security control baselines, architecture standards, threat models, assessment frameworks, and reusable security patterns across cloud and SaaS technologies.
• Familiarity with established security frameworks and methodologies such as NIST, MITRE ATT&CK, STRIDE, OWASP, and zero-trust principles.
• Experience providing technical leadership across complex, cross-functional cybersecurity initiatives involving multiple technology or business organizations.
• Experience effectively communicating complex cybersecurity architecture, risk, and technical recommendations to senior technology and business leaders.
• Knowledge of financial services technology environments and the cybersecurity, resiliency, and risk considerations associated with operating at enterprise scale.

#CTC