Tech Risk and Controls Lead - Data Strategy and Controls - GT CDAO

Join our team to play a pivotal role in mitigating tech, data, and AIML risks and upholding operational excellence, driving innovation in risk management.

As an Data Strategy and Controls Lead in the Global Technology Chief Data and Analytics Office, you will be responsible for identifying, assessing, and mitigating compliance, operational, and data-related risks in line with the firm’s standards. You will provide subject matter expertise and execution oversight across technology, data, and AI governance processes, ensuring controls are designed, implemented, and operating effectively throughout the lifecycle. By partnering with Product Owners, Business Control Managers, Data Owners, Model Risk, and Regulators, you will contribute to reporting a clear and comprehensive view of technology and data risk posture and its impact on the business. Your knowledge of risk management, data governance, and control execution enables consistent adoption of firmwide frameworks while addressing line-of-business–specific needs in a complex and evolving environment.

Job responsibilities

• Ensure effective identification, quantification, communication, and management of technology, data, and AI-related risk, with a focus on root cause analysis, governance execution, and remediation tracking
• Support implementation and ongoing execution of firmwide AI governance frameworks within Global Technology, tracking adherence, identifying gaps, and driving closure through defined controls and escalation paths
• Support the execution and continuous improvement of Global Technology’s data risk management strategy, ensuring adherence to JPMC policies/standards and evolving regulatory expectations.
• Develop and maintain robust relationships, serving as a trusted partner to LOB technologists, data owners, assessment teams, and control managers to enable coordinated risk and governance outcomes
• Proactively monitor and evaluate control effectiveness across technology, data, and AI use cases, identifying gaps and recommending enhancements aligned to regulatory expectations and enterprise data strategy

Required qualifications, capabilities, and skills

• 5+ years of experience or equivalent expertise in Technology, Data, or AI risk management, information security, or related field, emphasizing risk identification, assessment, and mitigation
• Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements
• Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies
• Demonstrated ability to influence executive-level strategic decision-making and translating technology insights into business strategies for senior executives

Preferred qualifications, capabilities, and skills

• CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications are preferred