Lead Software Engineer - Security Analyst

We have an opportunity to impact your career and provide an adventure where you can push the limits of what's possible.

As a Lead Software Engineer at JPMorgan Chase within Asset and Wealth Management as a part of 55ip, you will be responsible for designing and implementing processes and tools to safeguard the firm's computing environment. Your role involves creating action plans, mitigating risks, and resolving control issues, providing you with valuable insights into the complex risk and regulatory landscape of today. Collaborating with our Cybersecurity and Technology Controls (CTC) team, you will lead innovative efforts to enhance our operations.

Job responsibilities

• Keeps informed about the latest trends in information technology and security standards and ensures timely communication and management of AO communications
• Identifies and tracks action items that have been raised through FARM findings, breaks logged within ‘CORE’ and all other JPMC platforms. Ensure all identified issues are investigated and remediated in a timely manner
• Collaborates with various teams to implement good security practices, assist with audits and tests to ensure compliance with JPMC control procedures / control objectives
• Proactively monitors Key Rick Indicators (KRIs) to identify non-compliance and assist in remediation with compensating controls to address security, risk and control gaps
• Initiates and collaborates with key stakeholders to conduct privileged access reviews periodically
• Supports key initiatives within the organization through notifications in AO Comms
• Validates and approves access requests through systems such as RSAM and future replacement
• Ensures timely certification of backup policies to ensure Retention Policies are adhered to and removing non-compliant backups where required
• Manages the prompt execution of vulnerability assessment reports and penetration tests. Review and assess any violations of security and network vulnerabilities and offer training and guidance to prevent recurrence of findings
• Certifies through the removal of old Functional Accounts and plans for Disaster Recovery on an annual basis and create plans in the event of any security breaches

Required qualifications, capabilities, and skills