Senior Technology Risk Officer - Corporate Internet Group-100012771 Job Details

Job Description
The Corporate Internet Group (CIG) creates and supports many of JPMorgan Chase's Internet facing online and mobile banking sites.  The Information Risk Management (IRM) Team within CIG is responsible for overseeing controls and programs necessary to protect customer information, system integrity, and physical assets associated with CIG's systems.
 
The IRM team is seeking an experienced risk management professional with a solid foundation in technology risk assessment, risk remediation, and technical controls implementation with a strong focus on Application/Software Security.  The candidate is responsible for coverage of the Corporate Internet Group's Information security program assisting clients in identifying, assessing, and managing technology risks for both new and existing technology.
 
As a member of the Information Risk Management function, the candidate will be expected to:

    * Support the development and implementation of the Information Risk Lead's Risk Management Strategy for their business division
    * Assist in the execution of a leading software security program
    * Perform risk assessments, risk remediation, and specific risk projects targeted within the LOB while fostering the maturity of processes for identifying, analyzing, and actively managing the information risk portfolio
    * Be a thought leader in determining risks and control recommendation for emerging technologies such as mobile banking, social media, and rich internet applications
    * Ensure that all pertinent Information Risk and Control regulatory requirements and applicable JPMC policies are understood by LOB clients, technologists, and IRM team members, and that these policies are implemented and monitored successfully

 Essential functions of this role are:
 
Partnership

    * A fundamental requirement within the Risk Management Function is the ability to operate as a team and in partnership
    * The incumbent must be able to partner across the technology and business teams to maximize the quality, integration and effectiveness of the risk management coverage. This requires a very proactive, open and communicative approach through all aspects of planning and execution
    * Such partnership is also expected in dealing with the other LOB risk managers as we share common goals of providing a well-controlled operating environment to maximize value to our shareholders

Communication

    * The individual is expected to be able to communicate concisely and effectively with all levels of the organization
    * The ability to communicate effectively with technologist and business personnel is critical, including the usage of business relevant terms to describe technology risks

Qualifications

    * Experienced Information Technology professional with a proven Financial Services track record of more than 7 years in Technology Risk Management, IT audit, technology operations and risk based projects
    * Strong Practical knowledge of the development lifecycle and project and program management concepts and controls
    * Strong knowledge of web application security and threat modeling
    * Enthusiastic, effective communicator thrives under pressure and willing to take personal responsibility and accountability
    * Extensive communication skills and experience in driving process improvement
    * Strong problem solving and analytical capabilities
    * Excellent written and oral presentation skills with the ability to create and define metrics that accurately reflects the current state of a given environment
    * Sound infrastructure knowledge of current and legacy technology including: Virtualization, Grid Computing, Cloud computing, Mainframe, Distributed Computing, Networking, Messaging, Database Management