Tech Risk and Controls Senior Associate (all genders)

Excited by the opportunity to build innovative digital retail banking products and services in a start‑up environment, backed by one of the leading financial service providers worldwide? Join uns at JPMorgan & Chase Co. at our newest European hub, located in the heart of Berlin. In this exciting chapter of continued growth and expansion for JPMorgan & Chase, as a passionate Senior Tech Risk and Controls Manager you will be responsible for providing guidance and solutions that assist in the management of cybersecurity and technology risk for the firm.

Working with our cybersecurity team, you’ll be at the forefront of innovation designed to strengthen our operations. As a Tech Risk and Controls Senior Associate within Cybersecurity and Technology Controls at Chase in Berlin, you will contribute to the successful management of technology‑aligned aspects of Governance, Risk, and Compliance that assist in the management of cybersecurity and technology risk for the firm. You will have the opportunity to explore eine breite Palette von Themen im Bereich Cybersecurity und Technologierisiko-Management und direkt mit Engineering, Business und anderen Kontrollfunktionen zusammenzuarbeiten, um Probleme zu lösen, die es uns ermöglichen, Vertrauen in großem Maßstab zu schaffen.

Job responsibilities:

• Assess and monitor technology risks, ensuring compliance with firm standards, regulatory requirements, and industry best practices.
• Support implementation of effective controls in collaboration with cross‑functional teams and stakeholders.
• Evaluate the effectiveness of existing controls, identify gaps, and recommend improvements to mitigate risks and enhance the firm's risk posture.
• Support regional oversight and governance by leveraging specific KPIs and KRIs.
• Engage in technology and security audits, and contribute to initiatives that ensure organizational practices adhere to regulations and standards.
• Evaluate regulatory and policy changes relating to cybersecurity and technology impacting the International Consumer Business.
• Interface with technology and other supporting corporate functions on an ongoing basis for business‑as‑usual risk activities, reporting, and project initiatives.

Required qualifications, capabilities, and skills:

• Bachelor's degree or the equivalent combination of education and relevant experience and 3+ years of total relevant work experience.
• Proficient knowledge in relevant regulations related to Retail Banking in Germany as well as the EBA Guidelines on ICT and Security Risk Management or the EBA Guidelines on Outsourcing Arrangements, and/or ISO27001, DORA, GDPR and NIST frameworks.
• Strong communication skills and ability to collaborate with high‑performing teams and individuals throughout the firm to accomplish common goals.
• Demonstrated ability to analyse complex issues, develop and implement risk mitigation strategies, and communicate effectively with senior stakeholders.
• Experience working with cloud and relevant modern engineering practices, such as containerization, access management, monitoring and/or CI/CD security.
• Excellent communication skills in German and English.

Preferred qualifications, capabilities and skills:

• 3+ years of experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on risk identification, assessment, and mitigation.
• Certified in CISA, CISM, CRISC, CISSP, CCSP, or other industry‑recognized risk certifications.
• Proficient in IT risk management operating models, three lines‑of‑defence frameworks, integrated risk management practices, and/or risk intelligence capabilities.
• Experience operating within a regulated industry.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs.