Job description

Bring your Expertise to JPMorganChase. As part of Risk Management and Compliance, you are at the center of keeping JPMorganChase strong and resilient. You help the firm grow its business in a responsible way by anticipating new and emerging risks and using your expert judgement to solve real-world challenges that impact our company, customers and communities. Our culture in Risk Management and Compliance is all about thinking outside the box, challenging the status quo and striving to be best-in-class. As a Technology Operational Risk Management Executive Director in Tech & Cyber Operational Risk Management team, you will provide independent oversight of operational risk for cloud and infrastructure platforms, tools, and supporting systems. You partner with technology and cybersecurity teams to review how solutions are developed, deployed, and operated, and you assess the effectiveness of processes and controls aligned to the CCOR Tech & Cyber framework. You proactively identify emerging technology and third-party risks and provide pragmatic recommendations that help us meet policy, regulatory, and industry expectations. Job responsibilities: • Perform independent reviews of global and regional technology and cybersecurity processes and controls supporting public and private cloud use • Assess operational risk for infrastructure and cloud platforms, tools, and supporting systems used to deliver technology services to the firm • Engage with infrastructure technology teams to build a clear understanding of the technology, data flows, and control environment • Evaluate third-party risks related to technology providers, services, and dependencies within your domain • Identify elevated risk concentrations globally and assess inherent risks and mitigating controls across relevant technology areas • Recommend control enhancements to align with JPMorganChase policies, regulatory requirements, and industry best practices • Track current technology trends, vulnerabilities, and emerging technologies to inform risk assessments and oversight priorities • Provide credible challenge and guidance to technology partners on control design, implementation, and operational effectiveness • Support the implementation and execution of the CCOR Tech & Cyber framework through consistent risk assessment and reporting • Participate in key technology governance forums and contribute to risk discussions and decisions • Document assessments, conclusions, and actions clearly to support transparency, auditability, and follow-through Required qualifications, capabilities, and skills: • Subject matter expertise in infrastructure and cloud technology domains, including operational processes and control expectations • Demonstrated hands-on experience across enterprise infrastructure components (network, compute, storage, database, and messaging), in on-prem and cloud environments • Working knowledge of network engineering concepts such as routing and switching, DNS/DHCP, load balancing, firewalls/WAF, proxy, segmentation, and VPN/private connectivity • Experience with compute and virtualization, including Linux/Windows, private cloud, and cloud compute primitives, plus reliability and hardening controls • Knowledge of storage and data protection practices, including backup/restore, replication, retention, and disaster recovery • Working knowledge of database platforms, including relational and NoSQL services, encryption, access controls, performance, and lifecycle management • Hands-on experience with at least one major public cloud provider (AWS, GCP, or Azure) and awareness of multi-cloud considerations • Knowledge of cloud security and compliance practices, including IAM, encryption/key management, vulnerability management, and relevant control frameworks • Familiarity with infrastructure as code and automation (e.g., CloudFormation, ARM, Deployment Manager, Terraform, Ansible) • Familiarity with DevOps and CI/CD practices, including controls around change management, segregation of duties, and secure pipelines • Familiarity with monitoring, observability, and optimization practices, including logging/alerting, SLO/SLI concepts, and operational health reporting Preferred qualifications, capabilities, and skills: • Experience designing and managing scalable, secure, and highly available cloud solution architectures • Knowledge of cloud-native application design patterns, including microservices, containers, serverless, and event-driven architectures Oversee cloud and infrastructure operational risk, assessing controls and emerging technology risks across the firm.

Requirements

Must-haves

Perform independent reviews of global and regional technology and cybersecurity processes and controls supporting public and private cloud use
Assess operational risk for infrastructure and cloud platforms, tools, and supporting systems used to deliver technology services to the firm
Engage with infrastructure technology teams to build a clear understanding of the technology, data flows, and control environment
Evaluate third-party risks related to technology providers, services, and dependencies within your domain
Identify elevated risk concentrations globally and assess inherent risks and mitigating controls across relevant technology areas
Recommend control enhancements to align with JPMorganChase policies, regulatory requirements, and industry best practices
Track current technology trends, vulnerabilities, and emerging technologies to inform risk assessments and oversight priorities
Provide credible challenge and guidance to technology partners on control design, implementation, and operational effectiveness
Support the implementation and execution of the CCOR Tech & Cyber framework through consistent risk assessment and reporting
Participate in key technology governance forums and contribute to risk discussions and decisions
Document assessments, conclusions, and actions clearly to support transparency, auditability, and follow-through
Required qualifications, capabilities, and skills:
Subject matter expertise in infrastructure and cloud technology domains, including operational processes and control expectations
Demonstrated hands-on experience across enterprise infrastructure components (network, compute, storage, database, and messaging), in on-prem and cloud environments
Working knowledge of network engineering concepts such as routing and switching, DNS/DHCP, load balancing, firewalls/WAF, proxy, segmentation, and VPN/private connectivity
Experience with compute and virtualization, including Linux/Windows, private cloud, and cloud compute primitives, plus reliability and hardening controls
Knowledge of storage and data protection practices, including backup/restore, replication, retention, and disaster recovery
Working knowledge of database platforms, including relational and NoSQL services, encryption, access controls, performance, and lifecycle management
Hands-on experience with at least one major public cloud provider (AWS, GCP, or Azure) and awareness of multi-cloud considerations
Knowledge of cloud security and compliance practices, including IAM, encryption/key management, vulnerability management, and relevant control frameworks
Familiarity with infrastructure as code and automation (e.g., CloudFormation, ARM, Deployment Manager, Terraform, Ansible)
Familiarity with DevOps and CI/CD practices, including controls around change management, segregation of duties, and secure pipelines
Familiarity with monitoring, observability, and optimization practices, including logging/alerting, SLO/SLI concepts, and operational health reporting

Nice-to-haves

Preferred qualifications, capabilities, and skills:

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsgcpazureci/cd

Platform: oracle-cloud
Effort: medium