Tech Risk and Controls Director
$156.8k - $285k
Senior, Expert
Plano, TX, USA+3 moreMore locations: Columbus, OH, USA | New York, NY, USA | Wilmington, DE, USA
In Person
CybersecuritySecurity Governance, Risk & Compliance
About the job
Requirements
- At least 7 years of experience in technology risk management, cybersecurity, technology controls, software engineering, or a related field, including demonstrated regulatory compliance and risk-mitigation experience.
- Experience leading complex technology or controls transformation initiatives, including developing target-state operating models, implementation roadmaps, governance routines, and measurable adoption outcomes.
- Experience designing or implementing controls-as-code, policy-as-code, automated guardrails, telemetry-driven controls, continuous monitoring, or evidence automation.
- Advanced knowledge of technology risk and control environments, including issue management, audit readiness, evidence standards, data quality, control design, control evaluation, and sustainable risk mitigation.
- Experience designing governance for enterprise-authorized AI capabilities or agentic AI-enabled workflows, including human validation, approval and escalation requirements, traceability, data sensitivity, security, and regulatory considerations.
- Ability to lead cross-functional initiatives, manage complex dependencies, influence senior stakeholders, and translate technical and control considerations into business strategy and executive-level communications.
- Practical knowledge of engineering methods and technology workflows, including applying systems thinking, root-cause analysis, automation, and measurable feedback loops to complex control challenges.
Responsibilities
- Develop and implement technology risk management strategies, policies, and processes that identify, assess, and mitigate risk while meeting firm standards and regulatory requirements.
- Lead the transformation of technology controls from reactive remediation to a proactive, product-based operating model with defined intake, prioritization, delivery, validation, and sustainable closure processes.
- Redesign technology controls for agentic artificial intelligence environments in which authorized AI capabilities may generate artifacts, recommend actions, or support workflow execution, with appropriate human oversight and handling of sensitive data.
- Establish reuse-first expectations and governance standards for enterprise-authorized AI capabilities used in technology risk and controls workflows, including validation, approval, escalation, traceability, and auditability requirements.
- Develop reusable control patterns across technology domains, including identity and access management, change management, operational resilience, monitoring, data, third-party technology, and configuration management.
- Implement controls-as-code, policy-as-code, automated guardrails, continuous control signals, and automated evidence capture within technology development and operational workflows.
- Design end-to-end traceability across control intent, actions, and outcomes, including AI-assisted actions and tool activity, to strengthen evidence quality, accountability, and audit readiness.
- Apply systems thinking, root-cause analysis, automation, and measurable feedback loops to reduce repeat issues, reopened findings, manual evidence collection, and control-related rework.
- Establish target-state architecture, implementation roadmaps, milestones, dependencies, adoption measures, and operating routines that improve control performance and remove delivery barriers.
- Manage control reporting, issue management, action-plan governance, and performance measurement, translating control health into trusted metrics, leading indicators, and decision points for senior leaders.
- Build relationships across technology, risk, cybersecurity, audit, and other functions to drive adoption of standardized controls and maintain alignment with legal, regulatory, security, and resiliency expectations.
Desired Qualifications
- Prior financial services experience.
About the company
JPMorgan Chase runs the largest bank in the United States, which serves households and small businesses as Chase and large companies, governments, and investors as J.P. Morgan. During the 2008 financial crisis it bought the failing investment bank Bear Stearns and lender Washington Mutual, and in 2023 it took over First Republic Bank after regulators seized it. Chase takes deposits and earns interest on credit cards, mortgages, and car loans, while the investment side earns fees for advising on mergers, raising money for companies, trading stocks and bonds, and managing wealth. Formed in a 2000 merger, JPMorgan Chase traces its roots to 1799 and is based in New York City.
Company Size
10,001+
Company Stage
IPO
Headquarters
New York City, New York
Founded
1799
Get referred to JP Morgan Chase
See people who can refer or advise you
Simplify's Take
What believers are saying
- Growth is broad-based: every JPMorgan division posted record revenue in the June 2026 quarter, and trading jumped 35%.
- Stock grants gained value: shares rose 21% in three months, valuing JPMorgan at $965 billion in August 2026.
- Tech teams are well funded: JPMorgan's nearly $20 billion yearly tech budget is the largest in banking.
What critics are saying
- AI is shrinking some teams: Dimon said in July 2026 that AI cut up to 40% of certain roles.
- Plan on five office days a week: JPMorgan ended hybrid schedules for all staff in early 2025.
- It is fighting the president in court: Trump sued JPMorgan for $5 billion in January 2026 over his closed accounts.
What makes JP Morgan Chase unique
- It ranks first in investment banking: JPMorgan earned 9.3% of global deal fees in the first half of 2026.
- It trains future CEOs: 10 Fortune 500 chiefs were JPMorgan alumni in September 2025, fifth-most of any employer.
- Its payments arm is a hidden giant: JPMorgan says it processes $12 trillion a day across 160-plus countries.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Flexible Work Hours
- Paid Sick Leave
- Paid Holidays