Tech Risk and Controls Senior Associate (all genders)

Excited by the opportunity to build innovative digital retail banking products and services in a start‑up environment, backed by one of the leading financial service providers worldwide? Join uns at JPMorgan & Chase Co. at our newest European hub, located in the heart of Berlin. In this exciting chapter of continued growth and expansion for JPMorgan & Chase, as a passionate Senior Tech Risk and Controls Senior Associate you will be responsible for providing guidance and solutions that assist in the management of cybersecurity and technology risk for the firm.

Working with our cybersecurity team, you’ll be at the forefront of innovation designed to strengthen our operations. Als Tech Risk and Controls Senior Associate within Cybersecurity and Technology Controls at Chase in Berlin, you will contribute to the successful management of technology‑aligned aspects of Governance, Risk, and Compliance that assist in the management of cybersecurity and technology risk for the firm. Working with our cybersecurity team, you'll design and implement processes, governance controls and tools that safeguard the firm's computing environment.

Job responsibilities:

• Assess and monitor technology risks, ensuring compliance with firm standards, regulatory requirements, and industry best practices.
• Support implementation of effective controls in collaboration with cross‑functional teams and stakeholders.
• Evaluate the effectiveness of existing controls, identify gaps, and recommend improvements to mitigate risks and enhance the firm's risk posture.
• Support regional oversight and governance by leveraging specific KPIs and KRIs.
• Engage in technology and security audits, and contribute to initiatives that ensure organizational practices adhere to regulations and standards.
• Evaluate regulatory and policy changes relating to cybersecurity and technology impacting the International Consumer Business.
• Interface with technology and other supporting corporate functions on an ongoing basis for business‑as‑usual risk activities, reporting, and project initiatives.
• Uses enterprise‑authorized AI capabilities within the work environment to accelerate synthesis of risk/control evidence and draft remediation recommendations, validating outputs and handling data according to sensitivity and security requirements.
• Promotes reuse‑first, AI‑assisted approaches to streamline recurring control testing and reporting routines, ensuring human review and alignment to governance standards.

Required qualifications, capabilities, and skills:

• Bachelor's degree or the equivalent combination of education and relevant experience and 3+ years of total relevant work experience.
• Proficient knowledge in relevant regulations related to Retail Banking in Germany as well as the EBA Guidelines on ICT and Security Risk Management or the EBA Guidelines on Outsourcing Arrangements, and/or ISO27001, DORA, GDPR and NIST frameworks.
• Strong communication skills and ability to collaborate with high‑performing teams and individuals throughout the firm to accomplish common goals.
• Demonstrated ability to analyse complex issues, develop and implement risk mitigation strategies, and communicate effectively with senior stakeholders.
• Experience working with cloud and relevant modern engineering practices, such as containerization, access management, monitoring and/or CI/CD security.
• Demonstrated experience using enterprise‑authorized AI capabilities within the work environment to support technology risk and controls workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI‑assisted risk summaries and recommendations before use, escalating when uncertain and following data handling expectations.
• Excellent communication skills in German and English.

Preferred qualifications, capabilities and skills:

• 3+ years of experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on risk identification, assessment, and mitigation.
• Certified in CISA, CISM, CRISC, CISSP, CCSP, or other industry‑recognized risk certifications.
• Proficient in IT risk management operating models, three lines‑of‑defense frameworks, integrated risk management practices, and/or risk intelligence capabilities.
• Experience operating within a regulated industry.

Wir diskriminieren nicht aufgrund eines geschützten Merkmals, einschließlich Rasse, Religion, Hautfarbe, nationaler Herkunft, Geschlecht, sexueller Orientierung, Geschlechtsidentität, Geschlechtsausdruck, Alter, Familienstand oder Veteranenstatus, Schwangerschaft oder Behinderung oder aus einem anderen Grund, der nach geltendem Recht geschützt ist. Wir bieten auch angemessene Vorkehrungen für die religiösen Praktiken und Überzeugungen von Bewerbern und Mitarbeitern sowie für die Bedürfnisse im Bereich psychischer Gesundheit oder körperlicher Behinderung an.