Lead design and implementation of technology risk frameworks and taxonomies, establish standards (e.g., NIST, ISO, COBIT), drive controls uplift and transformation, engage product/engineering/business stakeholders, oversee governance and reporting, and communicate risk posture and recommendations to senior leadership.
Join the GRC Frameworks and Taxonomy Team
Role Overview:
Join our GRC Frameworks and Taxonomy Team as Vice President, Tech Risk & Controls Transformation Lead. In this senior role, you will be instrumental in defining, cultivating, and embedding “what good looks like” for technology risk and controls across the organization. You will set and uphold the big rules and standards for risk management, leveraging your extensive experience and exposure to best practices to guide the uplift and transformation of controls. This role requires deep expertise in designing frameworks, engaging diverse stakeholders, and driving continuous improvement in risk management practices.
- Define and Cultivate Best Practices: Establish and promote a clear vision of “what good looks like” for technology risk and controls, setting the big rules and standards that guide the organization’s approach.
- Frameworks and Taxonomy Leadership: Design, implement, and continuously enhance risk management frameworks and taxonomies, ensuring clarity, consistency, and alignment with regulatory, legal, and industry standards (e.g., NIST, ISO 27000, COBIT).
- Controls Uplift & Transformation: Lead and execute cross-functional initiatives to uplift and transform technology controls, ensuring they are robust, effective, and future-ready.
- Stakeholder Engagement: Partner with product, engineering, business, and control teams to embed best practices, facilitate collaboration, and drive adoption of frameworks and standards.
- Governance and Reporting: Oversee governance, reporting, and issue management for controls and frameworks, providing senior management with actionable insights into risk posture and control effectiveness.
- Continuous Improvement: Foster a culture of operational excellence and innovation, driving ongoing enhancement of risk management practices and frameworks.
- Communication and Influence: Effectively communicate the vision, standards, and program status to senior stakeholders, translating technical concepts into business impacts and ensuring buy-in across all levels.
- 10+ years of experience in technology risk management, cybersecurity, technical program management, or technology controls roles.
- Demonstrated experience in defining, recognizing, and cultivating “what good looks like” in risk and controls, with exposure to industry-leading practices and standards.
- Proven ability to design, implement, and operate risk management frameworks and taxonomies.
- Proficiency in regulatory, legal, and industry standards (e.g., NIST, ISO 27000, COBIT).
- Strong stakeholder management skills, with experience engaging product, engineering, and business teams.
- Excellent verbal and written communication skills, able to convey complex risk information and standards to diverse audiences.
- Strong analytical and problem-solving skills, with a track record of driving root cause analysis and effective solutions.
- Formal training or certification in Tech Risk & Controls (e.g., CISM, CRISC, CISSP) is preferred.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorganChase London, England Office
25 Bank Street, Canary Wharf, London, United Kingdom, E14 5JP
Similar Jobs
Financial Services
Lead technology risk and controls activities: manage audits and remediation, maintain control standards, onboard tooling/telemetry, run application oversight governance, track KPIs/KRIs, support vulnerability management, produce executive risk reporting, and apply validated enterprise AI to accelerate risk workflows.
Top Skills:
ArcherEnterprise AiGrc ToolsInfrastructure As CodeSecure SdlcTelemetryVulnerability Management
Financial Services
Lead technology risk and controls for Cloud Foundational Services: perform control reviews and risk assessments, identify and report risks, support process owners, monitor technology risks and compliance, manage regulatory engagements related to public cloud, and recommend control improvements.
Top Skills:
Public Cloud
Artificial Intelligence • Big Data • Enterprise Web • Fintech • Software • Financial Services
Lead analyst for project and infrastructure finance transactions, assessing creditworthiness, performing financial statement analysis and modelling, drafting credit reports and committee materials, managing issuer and banker relationships, producing topical research, and representing the firm externally.
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
