Job Description Information Security Manager - Data Protection Control Domain
We are seeking an Associate Information Security Manager for the Data Protection team in JPMC's Cybersecurity and Technology Controls function. The right candidate is passionate about cybersecurity and protecting the data of our customers. A practitioner and someone that can lead technical discussions in depth while continuing to be curious, and creative in the ways we resolve complex data protection challenges. JPMorgan Chase embraces a culture of experimentation and constantly strives for improvement and learning. You'll work in a collaborative, trusting, thought-provoking environment - one that encourages diversity and creative solutioning that are in the best interests of our customers globally. In this role, you will be primarily responsible for driving control outcomes in our Data Protection Control Domain.
Responsibilities Include

• Drive Data Protection Control Outcomes for the firm. This includes Encryption, Cryptographic Key Management, Masking, Tokenization, and Privacy Controls etc.
• Drive and Manage the Data Protection metrics program. Create logic to develop the key control measurement metrics and partner with Product teams to deliver the metrics.
• Manage the Data Protection Metrics Lifecyle and the associated Reporting to various stakeholders including the Firm's senior executives
• Uplift, and Manage Data Protection Standards and Procedures including Data at Rest, Data in Transit, Cryptographic Algorithms, Cryptographic Key Management, and Privacy Technology Standards and Procedures.
• Define Data Protection Controls Requirements for both Cloud and On Premises Platforms across the technology stack from Storage to Applications to End User devices like Laptop, ATM's etc.
• Extensively partner with Product, and Engineering teams across the firm to deliver the control outcomes
• Articulate a coherent end-to-end picture of Data Protection risk and control including risk scenarios, policies and standards, control assessments and measurements, issues and breaks.
• Govern the GRC assessment processes to determine effectiveness of Data Protection controls.
• Act as a focal point to engage Audit, 2LOD, Information Security Management, Metrics, and Regulatory Management functions to business control functions, and the GIAM teams to drive transparent, measurable
• Communicate extensively with all levels of staff including Senior Technology and Data Leaders

Skills Required

• Bachelor's Degree in Computer Science, Cybersecurity, or equivalent.
• 5+ years of cybersecurity technology experience
• Metrics Development and/or Metrics Management skill either as a Project Manager or as a Developer
• Encryption and Cryptographic Key Management experience, either as an Engineer, Product Manager, Architect, or an Information Security Manager
• Identity and Access Management experience
• Familiarity in several Information Security Domains - Network Security, Asset Management, Security Architecture, Software Development Security, Security Operations, SEIM etc.
• Strong Risk and Controls Management experience either as an Engineer, Product Manager, Architect, or an Information Security Manager
• Ability to forge strong relationships with SMEs/Engineers across the world and leverage their inputs consistently for sustained periods of time
• Ability to communicate fluently with stakeholders
• Strong experience working in a Cloud Computing Environment
• Certifications such as CISSP, CCSP, CDPSE are desirable

About Us JPMorgan Chase & Co., one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. In accordance with applicable law, we make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as any mental health or physical disability needs.
The health and safety of our colleagues, candidates, clients and communities has been a top priority in light of the COVID-19 pandemic. JPMorgan Chase was awarded the "WELL Health-Safety Rating" for all of our 6,200 locations globally based on our operational policies, maintenance protocols, stakeholder engagement and emergency plans to address a post-COVID-19 environment.
As a part of our commitment to health and safety, we have implemented various COVID-related health and safety requirements for our workforce. Full vaccination is a requirement for this role for new hires joining JPMorgan Chase. Additional requirements include sharing information including your vaccine card in the firm's vaccine record tool and may include mask wearing and social distancing. Requirements may change in the future with the evolving public health landscape. JPMorgan Chase will consider accommodation requests as required by applicable law.
Note: The requirement to be fully vaccinated to be hired for this role does not apply to roles with a work location in Arkansas, Florida, Iowa, Montana, and Tennessee. For applicants to these roles, JPMorgan Chase will consider all qualified applicants regardless of vaccination status, due to state and local laws.
Equal Opportunity Employer/Disability/Veterans
About the Team Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.