Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead and enhance the Application Risk Classification model while driving innovation in risk modelling.
- Company: Join J.P. Morgan, a global leader in financial services with a focus on diversity and inclusion.
- Benefits: Competitive salary, diverse work environment, and opportunities for professional growth.
- Why this job: Make a real impact by managing technology and cyber risks in a dynamic setting.
- Qualifications: Experience in technology risk management and strong data analysis skills required.
- Other info: Collaborate with cross-functional teams and communicate insights to senior leadership.
The predicted salary is between 36000 - 60000 £ per year.
Join our team to play a pivotal role in advancing JPMC’s technology risk management capabilities. As the Tech Risk & Controls Lead, you will own and continuously enhance the Application Risk Classification (ARC) model, while supporting the development and integration of other risk models and performing thematic analysis. You will drive innovation in risk modelling, ensure operational excellence, and provide actionable insights to senior leadership, helping the firm proactively manage technology and cyber risks in a dynamic environment.
Key Responsibilities
- Own and Enhance ARC Model: Lead the ownership, maintenance, and continuous improvement of JPMC’s Application Risk Classification (ARC) model, ensuring it adapts to evolving threats, technology changes, and regulatory requirements.
- Support Broader Model Development: Collaborate on the development, integration, and prioritization of additional risk models including de-duplication and reconciliation of risk findings from multiple sources.
- Thematic Analysis & Insights: Conduct thematic analysis of risk data to identify trends, vulnerabilities, and areas for improvement. Provide actionable recommendations to inform risk‑based decision‑making.
- Stakeholder Engagement: Partner with engineering, security, business, and data teams to embed risk models into operational and strategic processes. Build trusted relationships to facilitate cross‑functional collaboration.
- Reporting & Communication: Communicate risk priorities, model outcomes, and business implications to both technical and non‑technical audiences. Translate complex technical risk data into clear, actionable recommendations for senior leadership.
Required Qualifications, Capabilities, And Skills
- Proven experience in technology risk management, cyber risk modelling, or information security, with a focus on risk identification, assessment, and mitigation.
- Strong understanding of application risk classification, risk scoring methodologies and prioritization frameworks.
- Advanced data analysis skills; proficiency in SQL, Python, R, or equivalent tools.
- Experience with techniques for de‑duplicating and reconciling risk findings from multiple sources (e.g., vulnerability scanners, code reviews, threat intelligence).
- Ability to synthesize complex technical information and present it in a clear, concise manner to senior executives.
- Familiarity with regulatory frameworks (e.g., NIST, ISO 27001, CIS Controls) and financial industry requirements.
- Demonstrated ability to influence strategic decision‑making and translate technology insights into business strategies.
- Excellent written and verbal communication skills.
- Proactive in staying updated on cyber threat trends, regulatory changes, and emerging technologies.
Preferred Qualifications
- Industry‑recognized certifications such as CISM, CRISC, CISSP, or similar.
- Experience leading risk model development, application risk classification, or data de‑duplication initiatives.
ABOUT US
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first‑class business in a first‑class way approach to serving clients drives everything we do. We strive to build trusted, long‑term partnerships to help our clients achieve their business objectives. We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
About The Team
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.
Tech Risk & Controls Lead – Application Risk Classification (ARC) & Model Development employer: JPMorganChase
Contact Detail:
JPMorganChase Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Tech Risk & Controls Lead – Application Risk Classification (ARC) & Model Development
✨Tip Number 1
Network like a pro! Reach out to folks in the industry, attend meetups, and connect with people on LinkedIn. You never know who might have the inside scoop on job openings or can put in a good word for you.
✨Tip Number 2
Prepare for interviews by practising common questions related to tech risk and controls. Think about how your experience aligns with the role and be ready to share specific examples that showcase your skills.
✨Tip Number 3
Don’t just apply anywhere; focus on companies that excite you! Use our website to find roles that match your skills and interests. Tailor your approach to show why you’re a perfect fit for their team.
✨Tip Number 4
Follow up after interviews! A quick thank-you email can go a long way. It shows your enthusiasm for the role and keeps you fresh in the interviewer's mind. Plus, it’s a great chance to reiterate your interest!
We think you need these skills to ace Tech Risk & Controls Lead – Application Risk Classification (ARC) & Model Development
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter to highlight your experience in technology risk management and application risk classification. We want to see how your skills align with the role, so don’t hold back on showcasing relevant projects!
Showcase Your Data Skills: Since this role involves advanced data analysis, be sure to mention your proficiency in SQL, Python, or R. We love seeing examples of how you've used these tools to tackle real-world problems, so include any relevant projects or achievements.
Communicate Clearly: Remember, you’ll need to translate complex technical information into clear insights for senior leadership. Use straightforward language in your application to demonstrate your ability to communicate effectively with both technical and non-technical audiences.
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it shows you’re keen on joining our team at J.P. Morgan!
How to prepare for a job interview at JPMorganChase
✨Know Your Risk Models
Make sure you have a solid understanding of the Application Risk Classification (ARC) model and other risk models relevant to the role. Brush up on how these models adapt to evolving threats and regulatory requirements, as this will show your commitment to continuous improvement.
✨Data Analysis Skills Are Key
Since advanced data analysis skills are crucial for this position, be prepared to discuss your experience with SQL, Python, or R. Bring examples of how you've used these tools to identify trends or vulnerabilities in risk data, and be ready to explain your thought process.
✨Communicate Clearly
You’ll need to translate complex technical information into clear recommendations for senior leadership. Practice explaining technical concepts in simple terms, as this will demonstrate your ability to engage with both technical and non-technical audiences effectively.
✨Build Relationships
Stakeholder engagement is vital for this role. Think about how you can showcase your experience in building trusted relationships across teams. Prepare examples of past collaborations that led to successful outcomes, highlighting your ability to influence strategic decision-making.
