Tech Risk and Controls Director

Location: Sao Paulo, SP, Brazil

Job Family: Technology Risk & Services

About the Role

At JP Morgan Chase, we are at the forefront of redefining the future of financial services through innovative technology solutions. As a Tech Risk and Controls Director in our Sao Paulo office, you will play a pivotal role in leading the strategic development and implementation of technology risk management practices within a dynamic, evolving tech landscape. Reporting to the Head of Technology Risk for Latin America, you will ensure that our cutting-edge banking platforms, digital services, and infrastructure remain resilient against emerging risks while complying with stringent global and local regulations. This position demands a visionary leader who can balance innovation with robust controls, safeguarding our clients' assets and maintaining JP Morgan's reputation as a trusted financial powerhouse. Your core responsibilities will include overseeing the end-to-end technology risk lifecycle, from identifying vulnerabilities in IT systems and applications to designing proactive controls that mitigate cyber threats, data breaches, and operational disruptions. You will collaborate closely with technology, compliance, and business teams to embed risk management into every phase of our tech initiatives, such as cloud migrations and AI-driven analytics. In the context of Brazil's vibrant financial market, you will navigate local regulations like LGPD alongside international standards, conducting thorough risk assessments and leading remediation efforts to uphold the highest standards of integrity and security. This role offers the opportunity to lead a talented team of risk experts, influence enterprise-wide strategies, and contribute to JP Morgan Chase's commitment to responsible innovation. With access to world-class resources and a collaborative culture, you will drive measurable improvements in our risk posture, enabling sustainable growth in one of the world's leading financial institutions. If you thrive in a fast-paced environment where technology meets finance, join us in Sao Paulo to shape the secure future of banking.

Key Responsibilities

• Lead the strategic development and execution of technology risk management frameworks to mitigate risks in JP Morgan Chase's tech ecosystem
• Oversee the identification, assessment, and monitoring of technology risks across IT infrastructure, applications, and data management in compliance with global and local regulations
• Collaborate with senior technology leaders to integrate risk controls into business initiatives, ensuring alignment with JP Morgan's risk appetite
• Develop and implement policies, procedures, and controls for emerging tech risks such as AI, cloud migration, and cybersecurity threats in the financial services sector
• Manage a team of risk professionals, providing guidance on risk assessments, issue remediation, and reporting to executive leadership
• Conduct regular audits and testing of tech controls, partnering with internal audit and regulatory bodies to ensure adherence to standards like SOX and Brazilian data protection laws
• Drive continuous improvement in risk management practices by leveraging data analytics and industry best practices
• Represent the technology risk function in cross-business forums, advising on risk implications for strategic tech projects
• Monitor and report on key risk indicators (KRIs) and control effectiveness to senior management and the board
• Foster a culture of risk awareness and compliance within technology teams across JP Morgan Chase's global operations

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Finance, or a related field; advanced degree (MBA or Master's) preferred
• 10+ years of experience in technology risk management, controls, or compliance within the financial services industry
• Proven track record in leading risk management programs in a large-scale banking environment, with exposure to regulatory frameworks like Basel III, GDPR, and local Brazilian regulations
• Deep understanding of technology risks including cybersecurity, data privacy, IT infrastructure, and cloud computing in a financial context
• Experience in developing and implementing enterprise-wide risk and control frameworks for tech operations
• Strong knowledge of audit processes and collaboration with internal/external auditors in a global financial institution
• Fluency in English and Portuguese, with excellent communication skills for stakeholder engagement

Preferred Qualifications

• Certification in risk management such as CRISC, CISA, or CISSP
• Prior experience at a major global bank like JP Morgan Chase, with focus on Latin American markets
• Background in agile methodologies and DevOps practices applied to risk controls
• MBA or advanced certification in financial risk management
• Experience leading cross-functional teams in a multicultural, high-stakes environment

Required Skills

• Expertise in technology risk assessment and control frameworks
• Strong knowledge of financial regulations and compliance standards
• Proficiency in risk management tools and software (e.g., Archer, RSA Archer)
• Advanced analytical skills for data-driven risk evaluation
• Leadership and team management in high-pressure environments
• Excellent verbal and written communication for executive reporting
• Project management abilities, including agile and waterfall methodologies
• Cybersecurity fundamentals and threat modeling
• Strategic thinking for aligning risk with business objectives
• Cross-functional collaboration and stakeholder influence
• Problem-solving in complex, evolving tech landscapes
• Familiarity with cloud platforms (AWS, Azure) and their risk implications
• Attention to detail in audit and control testing
• Adaptability to multicultural and global team dynamics
• Ethical decision-making in risk and compliance matters

Benefits

• Competitive base salary and performance-based annual bonus
• Comprehensive health, dental, and vision insurance coverage
• Retirement savings plan with generous company matching contributions
• Paid time off including vacation, sick leave, and parental leave
• Professional development programs and tuition reimbursement for advanced education
• Employee stock purchase plan and financial wellness resources
• On-site fitness centers, wellness programs, and mental health support
• Global mobility opportunities and relocation assistance for international roles

JP Morgan Chase is an equal opportunity employer.