JPMorgan Information Security Management 

United States, New York, New York 

185810800

DESCRIPTION:

Duties: Identify, document, and report on technology risks and associated controls in product area. Advise in the implementation of technology controls to comply with global regulatory requirements. Act as a liaison between management, product owner, Compliance, Conduct and Operational Risk (CCOR) and internal audit. Provide governance and oversight of technology risk and controls in partnership with LOB (Line of Business) technology executives, providing senior management with transparency on identified key risks, issue management and remediation activities. Proactively monitor Key Risk Indicators to identify non- compliance and assist in remediation with compensating controls to address security, risk and control gaps. Strategize to implement efficient and sustainable control improvements, including process enhancements and use of automated data collection techniques. Develop and maintain strong business and technology relationships, becoming a trusted partner to these groups. Collaborate with team members and stakeholders on firm-mandated, cross-LOB, and regional audits.

QUALIFICATIONS:

Minimum education and experience required: Master’s degree in Accounting, Finance, Information Systems, Computer Science, or related field of study plus 3 years of experience in the job offered or as Information Security Manager, Information Security Specialist, Risk Advisory Services Consultant I, Systems Consultant, or related occupation. The employer will alternatively accept a Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, or related field of study plus 5 years of experience in the job offered or as Information Security Manager, Information Security Specialist, Risk Advisory Services Consultant I, Systems Consultant, or related occupation.

Skills Required: Requires experience in the following: IT risk management; IT Risk Advisory; information security domain including policies and standards, risk and control governance and assessments, secure systems development lifecycle, access controls, regulatory compliance, technology resiliency, incident management, vulnerability management, and data protection; project management; cloud computing environments and respective controls; and Agile delivery.

Full-Time. Salary: $140,000.00-$150,000.00 per year.