Lead and perform risk‑based IT audits and technology assurance workstreams, supporting SOX and broader technology risk initiatives.
Responsibilities
Perform and progressively lead risk‑based IT audits and technology assurance workstreams, including planning, risk assessment, testing, reporting, and remediation follow‑up.
Support Qnity’s SOX program, including IT general controls, automated application controls, system‑generated information, interfaces, and technology‑related control changes.
Participate in engagements involving cybersecurity, artificial intelligence, operational technology, cloud, data, resilience, and other emerging risks.
Support assurance over major system implementations and transformations, including SDLC, data migration, access and security, testing, go‑live readiness, and post‑implementation activities.
Participate in technology‑related aspects of M&A, integrations, divestitures, and other significant business changes.
Requirements
Bachelor’s degree in Information Systems, Information Technology, Computer Science, Accounting, Finance, Business, or a related field.
Advise business and technology partners on operational risk matters, lead risk-based technology assessments, and apply AI knowledge to evaluate emerging technology risks.
Compensation
Target Salary: $141,000 to $184, 000 a year
Responsibilities
Advise business and technology partners on operational risk matters
Lead risk-based technology assessments
Evaluate control design and effectiveness
Communicate practical recommendations to stakeholders
Assess resilience risks, dependencies, recovery capabilities, and remediation plans
Requirements
Bachelor's Level Degree
Nice to have: 10+ years of relevant experience
Nice to have: certifications such as CBCP, CRISC, CISA, CISSP
Lead product ownership and strategy for JPMorganChase’s hardware security control plane, driving roadmap, backlog, and stakeholder engagement across cybersecurity, infrastructure, risk, and control functions.
Compensation
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions.
Compliance Testing Officer – Cyber, Tech & EUC Risk. Responsible for executing critical compliance testing and assurance activities, with a focus on Cybersecurity, Technology controls, and End-User Computing (EUC).
Responsibilities
Perform independent, full-scope, and targeted compliance tests on technology and cybersecurity controls to assess their design and operating effectiveness.
Conduct regular and comprehensive technology and cyber risk assessments, documenting findings and recommendations to reduce risk exposure.
Assess and test risks associated with End-User Computing (EUC), and IT enabaled Smart Solution (ITeSS) focusing on its principles, cycles and overall governance.
Independently evaluate technology and cyber risks within the business to ensure they are within the acceptable risk appetite.
Build and maintain effective engagement with the 1st Line of Defense, business partners, and other key stakeholders to understand their risk profiles.
The Information Security Specialist defines, develops and/or implements Technology Controls / Information Security related policies, programs, tools and provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank.
Locations (3)
Charlotte, North Carolina, United States
Mount Laurel, New Jersey, United States
Fort Lauderdale, Florida, United States
Compensation
$98,160 - $159,270 USD
Responsibilities
Defines, develops and/or implements technology controls and information security related policies, programs, and tools
Provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank
Senior Compliance Officer responsible for enterprise governance of CIP, CDD, EDD, and KYC frameworks, providing oversight, policy development, and risk management across the organization.
Compensation
This position is eligible to earn a base salary in the range of $96,000.00 - $181,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.
Responsibilities
Serve as enterprise subject matter expert for CIP, CDD, EDD, KYC and related regulatory requirements
Execute risk oversight activities in accordance with FCRM governance framework
Provide second‑line oversight and credible challenge of enterprise‑wide processes and controls
Interpret applicable laws and translate requirements into policies and standards
Own or provide authoritative review of enterprise policies and standards
Requirements
Bachelor’s degree or equivalent
Nice to have: advanced degree in law, business, finance, risk management
Nice to have: professional certification such as CAMS, CFE, CRCM, CFCS
Participate in structured corporate internship programming, including orientation, workshops, networking events, research projects, and professional development activities. Perform internal audit testing and assist with fieldwork for the IT Audit Practice Group.
Compensation
$17.00 - $26.71 per hour
Responsibilities
Participate in structured corporate internship programming
Perform internal audit testing and assist with fieldwork for the IT Audit Practice Group
Complete audit workpapers, document testing results, and support the development of audit conclusions
Evaluate technology controls and validate whether controls are operating as intended across technology-focused audit areas
Support IT audit assignments involving areas such as cybersecurity controls, cloud computing, and other technology-related processes
Requirements
Bachelor's Degree student
Nice to have: familiarity with cybersecurity concepts
Nice to have: exposure to cloud-computing concepts
Own the audit-ready representation of Xvantage capabilities, subscription and rating flows, automated reconciliations, production controls, and supporting evidence.
Compensation
The typical base pay range for this role across the U.S. is USD $138,100.00 - $234,800.00 per year.
Responsibilities
Own the audit-ready representation of Xvantage capabilities, subscription and rating flows, automated reconciliations, production controls, and supporting evidence.
Own end-to-end Xvantage process maps and data-flow documentation covering sources, applications, interfaces, transformations, calculations, storage, validations, exception handling, and downstream outputs.
Maintain Xvantage control documentation, including control descriptions, key attributes, frequency, ownership, evidence requirements, and dependencies.
Partner with product managers and engineers to assess control and evidence impacts from releases, configuration changes, incidents, and remediation.
Provide production-verifiable explanations of rating logic, duration calculations, discounts, subscription events, and daily reconciliation behavior.
Requirements
BS degree in Computer Science or related technical discipline
Participates on projects of moderate to high complexity and provides complex reporting, analysis, and assessments at the functional, business line or enterprise level for own area
Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors
Reviews project requirements and planned technical designs to ensure proper security patterns are accounted for
Requirements
Bachelor's degree
Nice to have: Lead expert resource in technology controls / information security
Nice to have: Acting as a lead expert resource for project teams, business, and/or outside vendors
Nice to have: Identifying potential compliance gaps and providing security recommendations
Nice to have: Reviewing project requirements and planned technical designs