Internal Audit Technology Senior Auditor - Issue Validations

At JPMorganChase, Internal Audit is a trusted, respected function where your work directly strengthens the controls that protect one of the world's most important financial institutions. The Issue Validation Team sits at the intersection of technology risk and audit excellence, offering you the chance to lead high-impact validations across a global technology landscape. If you thrive on independent delivery, credible challenge, and continuous improvement, this is the role for you.

As a Technology Senior Auditor on Internal Audit's Issue Validation Team, you will lead end-to-end validations of technology issues to assess whether remediation is complete, sustainable, and materially reduces residual risk to the firm. Each validation functions as a focused mini-audit encompassing planning, risk-based testing, evidence evaluation, and clear reporting of conclusions on control design and operating effectiveness. You will also help advance the adoption of AI-enabled tools and data analytics to strengthen quality, efficiency, and risk coverage in accordance with firm standards and data handling requirements.

Job Responsibilities

• Lead technology issue validations end-to-end, including scope definition, test strategy, execution, documentation, and reporting of final validation conclusions.
• Assess whether remediation demonstrates effective and sustainable control performance by testing both control design and operating effectiveness, and by evaluating evidence sufficiency to support a conclusion on residual risk.
• Drive timely resolution of open items by proactively engaging stakeholders on evidence gaps, remediation scope, sustainability concerns, and control intent; escalate disagreements through appropriate governance when required.
• Draft and deliver clear, concise validation documentation and reporting packages that articulate testing performed, results, exceptions, and final conclusions in a manner suitable for oversight and re-performance.
• Partner with technology and business stakeholders to understand remediation actions and implementation details while maintaining independence and providing credible challenge to ensure outcomes align to risk and control objectives.
• Manage multiple concurrent validations by prioritizing work across assignments, tracking milestones, and ensuring delivery against committed timelines without compromising quality.
• Share knowledge and provide informal coaching to less experienced team members, contributing to a strong culture of quality and continuous improvement

• Apply AI-enabled tools and data analytics to improve test coverage, evidence quality, and documentation consistency, while adhering to firm policies on model use, data handling, confidentiality, and audit standards.

Required qualifications, capabilities and skills

• Bachelor's degree in Computer Science, Information Systems, Accounting, Finance or a related field (or equivalent practical experience).
• Demonstrated experience leading end-to-end technology audit or validation work (planning, testing, documentation, and reporting) with accountability for final conclusions and workpaper quality.
• Demonstrated experience assessing and validating remediation of technology controls across cloud and infrastructure, identity and access management, application delivery, software development lifecycle, etc.
• Strong risk and control judgment, including the ability to evaluate evidence and determine whether remediation is sustainable and reduces residual risk to an acceptable level.
• Strong stakeholder management skills, including the ability to influence outcomes, manage difficult conversations, and provide independent challenge while maintaining constructive partnerships.
• Excellent written and verbal communication skills, including the ability to produce clear documentation that is re-performable and aligns to firm standards.

• Strong execution discipline, including the ability to manage multiple concurrent deliverables and meet deadlines while maintaining quality.

Preferred qualifications, capabilities and skills

• Knowledge of technology risk coverage across domains such as cyber security, infrastructure/operating systems, network security, data management, platform engineering, third-party technology risk, and endpoint controls.
• Demonstrated experience testing cloud controls, including governance/guardrails, configuration assurance, logging and monitoring, vulnerability/patch management, key management, and resilience patterns.
• Demonstrated experience testing Identity and Access Management (IAM) controls, including joiner/mover/leaver, privileged access, authentication/authorization, access provisioning, periodic access recertification, and segregation of duties.
• Demonstrated experience testing application and SDLC controls, including change management, CI/CD governance, code promotion controls, secure SDLC practices, configuration management, production access, and application logging/monitoring.
• Relevant professional certifications (for example, CISA, CIA, CISSP, or equivalent), or demonstrated commitment to continuous learning in technology risk and controls.
• Experience operating within large, complex financial institutions and navigating governance, regulatory expectations, and multi-stakeholder delivery environments.