Infrastructure Engineer II

Make your mark strengthening technology risk controls while growing your skills and mobility in a fast-paced, collaborative team.

As a Technology Risk and Controls Associate II at JPMorgan Chase within the Infrastructure Platforms team, you support the implementation of risk mitigation strategies, controls, and action plans for the firm. You partner closely with product and technology risk teams and cross-functional stakeholders to continuously improve risk management methods. You deliver clear, actionable insights that strengthen technology risk and controls in a dynamic, fast-paced environment.

Job Responsibilities:

• Collaborate with high-performing teams and individuals across the firm to achieve shared goals
• Support technology risk monitoring to help ensure alignment with firm standards, regulatory requirements, and industry best practices
• Partner with stakeholders to design and implement risk mitigation strategies, controls, and action plans for technology-aligned processes
• Assess control effectiveness and recommend improvements that address risk management gaps
• Communicate risk findings and updates to relevant stakeholders while maintaining alignment with organizational objectives and risk appetite
• Track key risk indicators to identify non-compliance and support remediation through compensating controls that address security, risk, and control gaps
• Maintain awareness of technology team strategies, product roadmaps, and key investment programs
• Analyze anomalies related to privileged access and support timely investigation and follow-up
• Investigate control or compliance issues and coordinate actions with stakeholders to drive closure
• Present complex technical findings to management in clear, concise, and accessible language

Required qualifications, skills, and capabilities:

• Bring 3+ years of experience or equivalent expertise in technology risk management, information security, or a related field
• Demonstrate proficiency in identifying and assessing risks and evaluating controls, with a solid understanding of industry standards
• Analyze complex issues to support development of risk mitigation strategies and clear stakeholder communication
• Communicate effectively with stakeholders, including translating technical topics into accessible updates and findings
• Apply knowledge of risk management frameworks, regulations, and industry best practices
• Use risk and control ecosystems (ITRC, FARM, CORE etc.) and reporting systems to support compliance with company-wide standards and record risks appropriately
• Perform security-focused work across areas such as vulnerability management and configuration management
• Operate with hands-on experience across block, file, or object storage technologies
• Engage with Agile delivery teams and use Jira and Confluence, including building dashboards in Jira and Confluence
• Support audit engagement (2nd line, 3rd line, PCI regulators etc.) by providing high-quality responses to auditors and regulators.
• Work effectively in technology infrastructure environments

Preferred qualifications, skills, and capabilities:

• Hold CISSP, CRISC, CISM, or equivalent industry certifications
• Exhibit strong attention to detail and manage to deadlines
• Provide storage, networking, or vendor appliance background
• Leverage exposure to Linux or Unix environments