Tech Risk and Controls Senior Associate (all genders)

Job Description

Excited by the opportunity to build innovative digital retail banking products and services in a start-up environment, backed by one of the leading financial service providers worldwide? 

Join us at JPMorgan & Chase Co. at our newest European hub , located in the heart of Berlin. In this exciting chapter of continued growth and expansion for JPMorgan & Chase, as a passionate Senior Tech Risk and Controls Senior Associate you will be responsible for providing guidance and solutions that assist in the management of cybersecurity and technology risk for the firm. 

Working with our cybersecurity team, you’ll be at the forefront of innovation designed to strengthen our operations.

As a Tech Risk and Controls Senior Associate within Cybersecurity and Technology Controls at Chase in Berlin, you will contribute to the successful management of technology-aligned aspects of Governance, Risk, and Compliance that assist in the management of cybersecurity and technology risk for the firm. Working with our cybersecurity team, you'll design and implement processes, governance controls and tools that safeguard the firm's computing environment. You will have the opportunity to explore a wide range of cybersecurity and technology risk management topics and engage directly with engineering, business, and other control functions to collaborate and solve problems that allow us to create trust at scale. Managing risks and overseeing cybersecurity and technology, you'll gain key insight into today's complex risk and regulatory landscape. 

 

Job responsibilities: 

• Assess and monitor technology risks, ensuring compliance with firm standards, regulatory requirements, and industry best practices
• Support implementation of effective controls in collaboration with cross-functional teams and stakeholders
• Evaluate the effectiveness of existing controls, identify gaps, and recommend improvements to mitigate risks and enhance the firm's risk posture
• Support regional oversight and governance by leveraging specific KPIs and KRIs.
• Engage in technology and security audits, and contribute to initiatives that ensure organizational practices adhere to regulations and standards.
• Evaluate regulatory and policy changes relating to cybersecurity and technology impacting the International Consumer Business.
• Interface with technology and other supporting corporate functions on an on-going basis for business-as-usual risk activities, reporting, and project initiatives.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate synthesis of risk/control evidence and draft remediation recommendations, validating outputs and handling data according to sensitivity and security requirements.
• Promotes reuse-first, AI-assisted approaches to streamline recurring control testing and reporting routines, ensuring human review and alignment to governance standards.

 

Required qualifications, capabilities, and skills 

• Bachelor's degree or the equivalent combination of education and relevant experience and 3+ years of total relevant work experience.
• Proficient knowledge in relevant regulations related to Retail Banking in Germany as well as the EBA Guidelines on ICT and Security Risk Management or the EBA Guidelines on Outsourcing Arrangements, and/or ISO27001, DORA, GDPR and NIST frameworks.
• Strong communication skills and ability to collaborate with high-performing teams and individuals throughout the firm to accomplish common goals.
• Demonstrated ability to analyse complex issues, develop and implement risk mitigation strategies, and communicate effectively with senior stakeholders.
• Experience working with cloud and relevant modern engineering practices, such as containerization, access management, monitoring and/or CI/CD security.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support technology risk and controls workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted risk summaries and recommendations before use, escalating when uncertain and following data handling expectations.
• Excellent communication skills in German and English.

 

Preferred qualifications, capabilities and skills

• 3+ years of experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on risk identification, assessment, and mitigation.
• Certified in CISA, CISM, CRISC, CISSP, CCSP, or other industry-recognized risk certifications .
• Proficient in IT risk management operating models, three lines-of-defense frameworks, integrated risk management practices, and/or risk intelligence capabilities. 
• Experience operating within a regulated industry.

 

#ICBcareer #ICBhiring 

About Us

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

About the Team

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.