What are the responsibilities and job description for the Tech Risk and Controls Lead - Outsourcing and Business Resiliency Governance Manager position at JPMorgan Chase?
Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management.
As a Tech Risk & Controls Lead in Risk Management & Controls , you will be responsible for identifying, and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards. By partnering with various stakeholders, including Product Owners, Business Control Managers, and Regulators, you will contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business. Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape.
Job responsibilities
Identify, assess, and prioritize outsourcing and business resiliency concerns/findings, developing actionable plans with internal business partners to address and resolve issues effectively
Monitor the implementation of actions to be taken, ensuring timely execution and adherence to established timelines
Manage and prepare comprehensive commentary on monthly highlighted breached metrics, outlining impacts, path to resolution, responsible parties, and timelines
Develop, maintain, and continuously improve business procedures to ensure operational efficiency and compliance with Corporate Third Party and Firmwide Business Resiliency standards
Collaborate with cross-LOB/CF teams to integrate best practices into existing procedures and determine opportunities for further uplift for the overall program included required metrics, dashboards, and reporting
Determine areas of risk and/or frequent areas of issue, prioritize actions to bring overall program uplift
Develop and deliver insights to management, highlighting themes, areas of opportunity, and progress updates
Maintain clear and open communication channels with stakeholders, ensuring transparency and fostering a collaborative environment
- Develop and maintain key contacts and working relationships with various areas within Enterprise Technology, Controls peer groups, Central Third Party Organization, and Firmwide Resiliency
- Ensure timely escalation of key risks and issues to management and interested stakeholders
Required qualifications, capabilities, and skills
- 5 years of experience or equivalent expertise in technology risk management, information security, or related field, emphasizing risk identification, assessment, and mitigation
- Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements
- Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies
- Demonstrated ability to influence executive-level strategic decision-making and translating technology insights into business strategies for senior executives
- Ability to coordinate engagement with key stakeholders and proficiency in cross-functional frameworks
- Strong understanding of business resiliency
- Adaptability to thrive in a fast-paced, collaborative, team-oriented, cross-functional environment
- Self-motivated and confident decision-maker with the ability to lead, challenge and influence change where necessary
- Synthesizes data quickly and communicates analysis succinctly and professionally
Preferred qualifications, capabilities, and skills
Minimum BS or equivalent level of education/experience
7 years in relevant business role, operations management, project/program management, or governance
Ability to maintain professional documentation for internal and external reporting purposes
Demonstrated knowledge/background in outsourcing and/or business resiliency