Technology Risk and Controls Lead

As a Tech Risk and Controls Lead within our technology risk organization, you will define and cultivate best practices for technology risk and controls. Frameworks and Taxonomy Leadership : Design, implement, and continuously enhance risk management frameworks and taxonomies, ensuring clarity, consistency, and alignment with regulatory, legal, and industry standards (e.g., NIST, ISO 27000, COBIT). Controls Uplift, Transformation, & Automation : Lead and execute cross-functional initiatives to uplift and transform technology controls, ensuring they are robust, effective, and future-ready.

Stakeholder Engagement : Partner with product, engineering, business, and control teams to embed best practices, facilitate collaboration, and drive adoption of frameworks and standards. Governance and Reporting : Oversee governance, reporting, and issue management for controls and frameworks, providing senior management with actionable insights into risk posture and control effectiveness. Continuous Improvement : Foster a culture of operational excellence and innovation, driving ongoing enhancement of risk management practices and frameworks.

Communication and Influence : Effectively communicate the vision, standards, and program status to senior stakeholders, translating technical concepts into business impacts and ensuring buy-in across all levels.

• Lead and execute complex, cross-functional GRC programs and initiatives, ensuring they achieve strategic outcomes and align with business objectives
• Communicate program status, execution risks/issues, and key decisions to senior stakeholders, maintaining transparency and fostering informed decision-making
• Identify, manage, and mitigate delivery risks, proactively addressing potential roadblocks and implementing contingency plans to maintain program momentum
• Partner with key stakeholders to iterate on design, implement, and continuously operate and enhance technology risk and control frameworks, ensuring they meet industry standards and regulatory requirements
• Promote a culture of high performance, operational excellence, and innovation within the GRC team, driving continuous improvement in risk management practices

, Capabilities, and Skills

• Experience in designing, implementing, and operating industry-standard frameworks such as COBIT, ITIL, NIST ( Essential )
• Experience working in 1LoD Technology Risk and Control function. Candidates with experience from medium-sized firms who can demonstrate (Essential) :
• Deep understanding on the operability of framework requirements across Technology and Cyber operations
• Deep understanding of end-to-end GRC and Technology Risk ecosystem and lifecycle
• Experience in Technology Operations or Service Management, specifically service transition, incident management and problem management ( Essential )
• Experience in technical program management, cybersecurity, and technology controls roles
• Ability to ensure decisions or constraints affecting program delivery are effectively escalated and addressed in a timely manner
• Competent user of service management tooling, in particular ServiceNow
• Strong verbal and written communication skills to translate technical risks into business impacts and engage with stakeholders at all levels
• Strong analytical skills to dissect complex challenges, conduct thorough root cause analysis, and develop effective solutions
• Proven ability to apply critical thinking and structured problem-solving techniques to address issues and drive continuous improvement in risk management practices
• Preferred

, Capabilities, and Skills:

• Experience in designing, implementing, and operating industry-standard frameworks such as COBIT, ITIL, NIST
• Experience in 3LoD as Technology Auditor. Professional qualifications of CISA, CRISC, CISM, CIA
• Deep understanding on the operability of framework requirements across Technology and Cyber operations

L’offre est publiée sur le site de JPMorganChase. Ouvrez l’offre originale ↗ pour y déposer votre candidature. Screeningpass ne remplit pas de formulaire à votre place.

Lancez une recherche de contact depuis cette page. Screeningpass vous propose jusqu’à trois personnes liées au poste. Vous choisissez celle à qui écrire, puis Screeningpass cherche son e-mail professionnel et prépare un message. Vous le relisez et l’envoyez vous-même avec Gmail. Une adresse e-mail n’est pas toujours disponible, et une réponse n’est jamais garantie.

Une recherche coûte 1 crédit. Le crédit vous est rendu si la recherche échoue. L’inscription offre 3 crédits, soit 3 recherches.

Screeningpass rassemble des offres de stage, d’alternance et d’emploi publiées par les entreprises. Pour une offre, Screeningpass trouve une personne à contacter dans l’entreprise, cherche son e-mail professionnel et prépare un message à partir de votre CV. Voir le fonctionnement en détail.