Director of Cybersecurity Architecture - Employee Compute

As a Director of Cybersecurity Architecture at JPMorgan Chase within the Cybersecurity and Technology Controls for the Employee Compute team, you lead a specific architecture area and drive impact within teams, technologies, and projects across departments. Utilize your in-depth knowledge of architecture, systems, applications, security concepts, and product management to lead multiple complex projects and initiatives, while serving as a primary decision maker for your teams and a driver of innovation to identify, create, and communicate risk, mitigation options, and solutions.

Job responsibilities

• Executes threat modelling and security baseline creation and maintenance


• Leads technology and process implementations to achieve functional architecture objectives 


• Sets strategy for cultivating skills in cybersecurity architects


• Accountable for decisions that influence teams’ resources, budget, tactical operations, and the execution and implementation of processes and procedures 


• Carries governance accountability for cybersecurity coding decisions, control obligations, and measures of success such as cost of ownership, maintainability, and portfolio operations 


• Develops the function’s objectives and accountable for outcomes


• Accountable for staffing, budget, and relevant profit and loss


• Champions the firm’s culture of diversity, equity, inclusion, and respect, and prioritizes diverse representation

Required qualifications, capabilities, and skills

• Formal training or certification on software engineering concepts and 10+ years applied experience. In addition,  5+ years of experience leading technologists to manage, anticipate and solve complex technical items within your domain of expertise


• Experience running teams of security architects that work with solutions architects to embed cybersecurity controls in on-premise and cloud-based platforms and applications and identify cyber risk


• Experience with Windows, macOS and Mobile security principles


• Experience with threat modelling and the STRIDE methodology


• Advanced in one or more programming languages (i.e. Java, Python, C/C++)


• Experience with defining security baselines for operating systems and applications


• Experience with defining control procedures and objectives


• Experience building cybersecurity products and solutions for public cloud-based applications and infrastructure


• Experience developing and leading cross-functional teams of technologists


• Experience hiring, developing, and recognizing talent