As an Information Security Manager at JPMorgan Chase within the Cybersecurity & Technology Controls organization, you aim to effectively identify, monitor, evaluate, and manage the firm's Technology and Cyber risks and controls, also including operational losses, material risk, regulatory changes, etc.
in support of the firm's strategic plan. We develop comprehensive processes to monitor, assess, and manage the risk of expected and unexpected events that may have an adverse impact on the firm.
Effective partnership with our customers executive management, business units, control departments and technology functions is critical for success.
The ideal candidate will have solid experience in Governance, Risk and Compliance and a proven track record in working on complex processes and technology projects in a regulated environment.
Our Information Security professionals are passionate about information security and control solutions for computing environments.
While managing a world-class team of technology experts, you'll partner with one or more disciplines, lines of business, regions or locations to respond to evolving business requirements and emerging threats.
You'll also leverage your expert knowledge of today's ever-changing cybersecurity and risk landscape to influence IT operations across the firm.
Responsibilities include offering guidance, best practices, and support across businesses, leading risk reviews and vulnerability assessments, identifying threats, communicating with senior leaders and other stakeholders, and managing budgets.
The Global Technology Risk, Operations and Controls group's function is a core part of the firm's Technology Governance, Risk and Compliance team within the Cybersecurity and Technology Controls organization Job Responsibilities : Governance oversight of Tech Control Assessment Programs Execution of Risk Management activities within the Tech Control Assessment Framework Partner with Tech Controls' Assessment Team and conduct independent Risk Management activities on control assessment scope and approach Manage and execute Regulatory, Audit and Compliance Engagements Support requests from Regulatory, Audit and Compliance Engagements impacting the GT Governance, Risk, and Compliance function Develop and maintain strong business and technology relationships, becoming a trusted partner with Global Technology Policies and Controls function, Control Domain function members, LOB Information Security Managers and Assessment and Assurance Program teams Communicate status updates to key stakeholders and senior management Provide accurate metrics and management reports on a timely basis Support and help drive control evaluation methodology and framework within Cyber and Technology Controls functionJob Requirements : Formal training or certification on technology risk concepts and 5+ years applied experience 5+ years of technology controls, risk-based consulting, risk assessments, audit and / or regulatory activities.
Experience with audit and / or technology risk assessment processes, and understanding of internal controls, and how they protect the firm and its clients Experience using industry best practice frameworks such as NIST, ISO, and ISACA Knowledge and experience with technology-relevant financial services regulations (e.
g., FFIEC handbooks, etc.) Good working knowledge of common & current information technology implementations Strong communication skills - both verbal and written - to tell an effective risk story Ability to collaborate with high-performing teams and individuals throughout the firm to influence outcomes and accomplish common goals Use data and metrics (e.
g., Key Risk Indicators) to identify non-compliance and assist in remediation with compensating controls to address security, risk and control gapsPreferred Skills & Qualifications : Knowledge and experience Public and Private Cloud technologies Experience automating compliance related risk monitoring activities CISA, CISSP, CRISC or other industry-recognized risk / audit certifications preferred
SailPoint Engineer, Information Security and Risk
Strong partnership with the application and business stakeholders along with other IT Shared Services teams is required to ensure IAM services, technology, and processes adhere to Cardinal Health’s security policies, audit, and security controls while also maintaining and improving on client experie...
Risk Management - Dealer Commercial Services - Wholesale Credit Executive - Vice President
As a Risk Management Dealer Commercial Services - Vice President in Dealer Commercial Services, you will be a leader on the team and expected to understand the risk appetite, guide decisions, manage and influence business priorities, and oversee the ongoing production of the portfolio. Approve Credi...
Senior Analyst, Information Security & Risk
Cardinal Health’s Information Security team is on a tremendous growth journey adding a number of new team members in our Cyber Threat Operations Center (CTOC) , IT Risk and Compliance, and Security Architecture teams. We boast tremendous opportunities to grow and apply technical skills to meet organ...
Tech Risk and Controls Senior Associate
As a Tech Risk & Controls Senior Associate in Cybersecurity and Technology Controls, you will contribute to the successful management of technology-aligned aspects of Governance, Risk, and Compliance in line with the firm's standards. Leverage your broad knowledge in risk management principles and p...
Development Program Manager – Q-Systems - Building Controls, Security and Low Voltage
Eight or more years of professional experience in building controls, security, and/or low voltage commercial design and construction practices and procedures from conceptual development through procurement to close out. The Development Program Manager is primarily responsible for leading and managin...
Risk Management - Business Manager - Associate
As a Risk Management - Business Manager - Associate in Risk Management and Compliance, you are at the center of keeping JPMorgan Chase strong and resilient. You will regularly meet with leaders and partners in Finance, Marketing, Human Resources, Strategic Analytics, Product Teams, IT, Governance, L...
Risk Management - Small Business Lending Risk Reporting & Analytics - Vice President
Job Responsibilities * Manage a high-volume and high-complexity analytic and reporting book of work, leveraging an AGILE project management discipline * Collaborate with Senior Leaders, Analytics & Reporting leads, Technology partners, and other stakeholders across the Small Busi...
Information Security Risk Analyst
Responsible for identifying, testing existing controls and understand where controls need to be within processes as indicated with technology frameworks and applicable regulations (i. Strong understanding and experience of enterprise risk management. Serves as a liaison between the Information Secur...
Quality & Risk Management Management, Manager
Demonstrated understanding of technology risks regarding technology-based engagement delivery models and enterprise technology; demonstrated understanding of managed services-based delivery models and all relevant QRM aspects (technology, operating model, quality and resources models, SOC certificat...
Security & Emergency Services Manager
Works with the Event Services Management team, Event Services & Security Administrator, Event Production Management team and other partners at multiple levels including Directors and Executives for special events to ensure departmental, event and Guest-facing Security needs are met and exceeded....