Technology Risk & Controls Director - CISO, Cyber
About the job
- At least 12 years of experience or equivalent expertise in technology risk management, information security, or a related field, focused on risk identification, assessment, and mitigation.
- Expertise in risk management frameworks, industry standards, and regulatory requirements relevant to the financial industry.
- Ability to lead large teams, manage cross-functional projects, influence executive-level strategic decision-making, and translate technology insights into business strategy when communicating with senior executives.
- Advanced knowledge and experience leading data security, risk assessment and reporting, and control evaluation, design, and governance, with a track record of implementing effective risk mitigation strategies.
- Develop and implement technology risk management strategies, policies, and processes to identify, assess, and mitigate risks, and drive strategic projects and initiatives that enhance technology risk management capabilities in line with industry best practices, firm standards, and regulatory requirements.
- Identify and escalate emerging and upstream technology risks through the firm's management framework tools, including risk event management, reporting, and action plan tracking; provide expert counsel to stakeholders regarding security obligations and facilitate acceptable outcomes.
- Establish and maintain relationships with internal and external stakeholders, including cross-functional team leads, regulators, and auditors, to ensure compliance with legal, regulatory, and industry standards.
- Manage reporting and governance of controls, policies, issue management, and measurements; provide senior leaders insight into control effectiveness and inform governance work.
- A university degree (Bachelor’s or equivalent) in Computer Science, Information Security, Systems/Software Engineering, Telecommunications, Information Systems, or a related field; a Master’s degree is preferred.
- At least 12 years of experience in cybersecurity, technology risk, or controls engineering within a regulated environment, preferably financial services, with demonstrated delivery of control uplift beyond governance or oversight.
- Ability to engineer and operationalize scalable preventive and detective cyber controls, including control automation such as policy-as-code or control-as-code, standardized evidence capture, and measurable improvements in control effectiveness.
- Working knowledge of cyber risk and control frameworks and standards such as NIST CSF, NIST 800-53, ISO 27001/27002, and COBIT; knowledge of Mexican financial industry regulations including SPID, SPEI, CNBV, and Indeval; and ability to translate requirements into engineering standards, control objectives, test procedures, and audit-ready evidence.
- Experience leading audit and regulatory examinations and remediation, including root-cause analysis, corrective action design, validation, sustainable closure, and recurrence prevention, with stakeholder management involving auditors, regulators, and senior executives.
- Controls engineering expertise across IAM/PAM; data security, including classification, encryption and key management, secrets management, and DLP; vulnerability and patch management, including risk-based prioritization and exceptions; security logging and monitoring, including telemetry standards and detection coverage; configuration hardening and drift management; and incident-learning-to-controls feedback loops.
- Ability to lead medium and large cross-functional programs and teams, prioritize a portfolio of initiatives, manage dependencies, and deliver outcomes using governance, metrics, and executive communication.
- Analytical and reporting skills to define and run KRIs/KPIs covering control coverage, compliance health, exceptions, exposure windows, and remediation performance, and provide decision-oriented insights to senior leadership.
- One or more preferred certifications: CISSP, CISM, CRISC, CISA, ISO 27001 LI/LA, cloud security certifications (AWS/Azure/GCP), ITIL, or PMP/PRINCE2.
- Fluency in Spanish and English, written and verbal, and ability to translate technical risk into business impact and influence stakeholders without direct authority.
About the company
JPMorgan Chase runs the largest bank in the United States, which serves households and small businesses as Chase and large companies, governments, and investors as J.P. Morgan. During the 2008 financial crisis it bought the failing investment bank Bear Stearns and lender Washington Mutual, and in 2023 it took over First Republic Bank after regulators seized it. Chase takes deposits and earns interest on credit cards, mortgages, and car loans, while the investment side earns fees for advising on mergers, raising money for companies, trading stocks and bonds, and managing wealth. Formed in a 2000 merger, JPMorgan Chase traces its roots to 1799 and is based in New York City.
Company Size
10,001+
Company Stage
IPO
Headquarters
New York City, New York
Founded
1799
Get referred to JP Morgan Chase
See people who can refer or advise you
Simplify's Take
What believers are saying
- Growth is broad-based: every JPMorgan division posted record revenue in the June 2026 quarter, and trading jumped 35%.
- Stock grants gained value: shares rose 21% in three months, valuing JPMorgan at $965 billion in August 2026.
- Tech teams are well funded: JPMorgan's nearly $20 billion yearly tech budget is the largest in banking.
What critics are saying
- AI is shrinking some teams: Dimon said in July 2026 that AI cut up to 40% of certain roles.
- Plan on five office days a week: JPMorgan ended hybrid schedules for all staff in early 2025.
- It is fighting the president in court: Trump sued JPMorgan for $5 billion in January 2026 over his closed accounts.
What makes JP Morgan Chase unique
- It ranks first in investment banking: JPMorgan earned 9.3% of global deal fees in the first half of 2026.
- It trains future CEOs: 10 Fortune 500 chiefs were JPMorgan alumni in September 2025, fifth-most of any employer.
- Its payments arm is a hidden giant: JPMorgan says it processes $12 trillion a day across 160-plus countries.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Health Insurance
Flexible Work Hours
Paid Sick Leave
Paid Holidays
Growth & Insights and Company News
6 month growth
-9%1 year growth
-4%2 year growth
-4%Tenable, the exposure management company, has entered a credit agreement for a $400 million senior secured revolving credit facility. The facility is initially undrawn and gives the company more flexibility in how it allocates capital. Together with the convertible note financing announced in September, it completes the refinancing of Tenable's prior credit agreement, which included a Term Loan B facility. It also replaces the revolving credit facility that matured in July. The new loans mature on October 13, 2031, subject to a springing maturity date of 91 days inside the maturity of other material indebtedness. JPMorgan Chase Bank acted as administrative agent, and Cooley LLP advised Tenable.
Four of the biggest US banks reported higher third-quarter profits on Tuesday, but warned that higher interest rates and inflation could hurt consumers and the economy. JPMorgan Chase, the largest US bank by assets, earned $15.3 billion, or $5.57 a share, up from $14.4 billion a year earlier. It missed analyst forecasts of $5.93 a share, its first miss in nearly three years. Goldman Sachs posted a profit of $5.29 billion, up from $4.1 billion, as equities revenue jumped 72%. Wells Fargo earned $5.95 billion and beat forecasts, while Citigroup's profit rose 40%. JPMorgan chief executive officer Jamie Dimon cited "large fiscal deficits, sticky inflation, elevated asset prices, rising interest rates and geopolitical conditions.
US stock futures were mixed on Tuesday as investors weighed a wave of earnings reports. Dow futures rose 0.9%, S&P 500 futures slipped 0.1%, and Nasdaq futures fell 0.7%. Memory stocks fell for a second day after a Chinese chipmaker, CXMT, said it had made a breakthrough in memory chip production. Roundhill Memory ETF fell more than 5% in premarket trading. UnitedHealth rose more than 2% after it earned an adjusted $4.69 per share on $112.69 billion in revenue, beating estimates. It raised its full-year earnings outlook to at least $20.50 per share. Goldman Sachs gained more than 3% on strong results. JPMorgan Chase, Wells Fargo, and Citigroup fell short in parts of their reports. Johnson & Johnson fell 2% after $25.40 billion in sales narrowly missed estimates, though it raised its full-year forecasts.
Accelevation Holdings Corp. (Nasdaq: ACCV) has signed a new $650 million senior secured credit agreement. It replaces the credit facilities the company set up before its initial public offering. The deal includes a $400 million revolving credit facility and a $250 million Term Loan A, both maturing in 2031. Pricing is Term Secured Overnight Financing Rate (SOFR) plus 1.50% to 2.50%, down from SOFR plus 4.50% to 5.25%. "The new facilities extend our maturity profile, reduce our borrowing costs, and provide flexibility to continue investing in our business," said chief financial officer Ken Krause. Bank of America, N.A. acted as administrative agent and collateral agent. The Miamisburg, Ohio-based company designs, manufactures, and installs systems for mission-critical infrastructure.
i3 Verticals announced on 9 October 2026 that its subsidiary, i3 Verticals, LLC, secured a $350 million senior secured revolving credit facility with JPMorgan Chase Bank as administrative agent. The agreement replaces a previous credit facility dated 8 May 2023. The facility includes an accordion feature allowing additional commitments up to $100 million or 100% of consolidated EBITDA. Interest rates are based on either base rate or Term SOFR Rate, with margins ranging from 0.50% to 1.50% for base rate loans and 1.50% to 2.50% for Term Benchmark Loans. The borrower must maintain a consolidated interest coverage ratio of at least 3.00 to 1.00 and a consolidated total net leverage ratio not exceeding 4.00 to 1.00. All obligations are guaranteed by i3 Verticals and its material wholly owned domestic subsidiaries.