Leads cybersecurity architecture and enterprise security control development across multiple technology domains. Evaluates current and emerging technologies, guides risk and control assessments, advises business and technical stakeholders during vulnerabilities, and promotes secure SDLC practices. Uses authorized AI capabilities to accelerate security analysis and validation while ensuring data sensitivity, resiliency, auditability, and security requirements. Serves as a senior subject matter expert and provides technical direction to teams, contractors, and vendors.
Play a vital role in shaping the future of an iconic company and make a direct impact in a dynamic environment designed for top achievers.
As a Senior Lead Cybersecurity Architect at JPMorganChase within CTC, you are an integral part of a team that works to develop high-quality cybersecurity solutions for various software applications and platform products. Drive significant business impact through your capabilities and contributions, and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains.
Job responsibilities
As a Senior Lead Cybersecurity Architect at JPMorganChase within CTC, you are an integral part of a team that works to develop high-quality cybersecurity solutions for various software applications and platform products. Drive significant business impact through your capabilities and contributions, and apply deep technical expertise and problem-solving methodologies to tackle a diverse array of cybersecurity challenges that span multiple technology domains.
Job responsibilities
- Guides evaluation of current cybersecurity principals, processes and controls, and leads evaluation of new technology using existing standards and frameworks, influencing peers and decision-makers to adopt leading-edge solutions where appropriate
- Uses enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity risk analysis and control assessment, validating outputs and handling data according to sensitivity and security requirements.
- Regularly provides technical guidance and direction to support the business and its technical teams, contractors, and vendors, serving as a function-wide subject matter expert in one or more areas of focus
- Works with stakeholders and senior business leaders to recommend business modifications during periods of vulnerability
- Actively contributes to the engineering community as an advocate of firm wide frameworks, tools, and practices of the Software Development Life Cycle
- Drives reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines, improving control testing, remediation quality, and traceability/auditability in line with resiliency expectations.
Uses enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity risk analysis and control assessment, validating outputs and handling data according to sensitivity and security requirements
Required qualifications, capabilities, and skills
- Formal training or certification on cybersecurity architecture and 5+ years applied experience.
Hands-on practical experience delivering enterprise level cybersecurity solutions and controls - Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.
- Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
- Advanced expertise in one or more programming language(s) and/or applications, with advanced knowledge of cybersecurity architecture, applications, and technical processes within one or more technical disciplines (e.g., public cloud, AI/ML, mobile, etc.)
- Ability to tackle design and functionality problems independently with little to no oversight
- Ability to evaluate current and emerging technologies to select or recommend the best solutions for the future state architecture
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.
Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
Preferred qualifications, capabilities, and skills
- Security engineering, threat modeling, or architecture governance as a product domain.
- Experience integrating engineering teams that previously reported into separate leaders, and carrying in-flight commitments through the transition.
- Familiarity with pooled capacity models and the intake process product teams use to request engineering. Experience setting hiring, leveling, or development standards for senior technical talent.
- CISSP, CISM, advanced cloud architecture certifications, or comparable senior credentials.
#CTC
JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans
JPMorganChase San Francisco, California, USA Office
San Francisco, CA, United States
Similar Jobs
Financial Services
Leads cybersecurity architecture and product security initiatives across applications and platforms. Evaluates controls, technologies, and AI-assisted security recommendations; guides risk analysis, threat modeling, remediation, and security posture assessments. Partners with architects, developers, vendors, and business leaders to define scalable security patterns, validate solutions, and improve software development lifecycle controls, resiliency, auditability, and traceability.
Top Skills:
Artificial IntelligenceMachine LearningMobilePublic CloudSoftware Development LifecycleThreat Modeling
Financial Services
Leads cybersecurity architecture and design reviews for cloud platforms, SaaS, Microsoft 365, AI-enabled services, and technology integrations. Conducts threat modeling, attack-surface analysis, and control assessments; identifies risks and develops mitigation strategies. Partners with engineering, product, risk, and business stakeholders to resolve security findings, evaluate emerging technologies, and promote reusable security patterns, AI-assisted validation, and secure SDLC practices.
Top Skills:
Ai/MlAPIsAWSExchange OnlineGCPLlmsMicrosoft 365AzureMicrosoft CopilotMicrosoft DefenderMicrosoft Entra IdMicrosoft GraphMicrosoft PurviewMicrosoft TeamsMitre Att&CkNistOauthOnedriveOwaspSaaSSharepoint OnlineStrideZero Trust
Financial Services
Lead product security initiatives across the product lifecycle by integrating security controls into cloud platforms, creating secure design patterns, guiding secure development, and conducting threat modeling, risk assessments, vulnerability assessments, and code reviews. Drive DevSecOps practices, security awareness, policy improvements, and executive reporting while partnering with engineering, architecture, and cross-functional teams.
Top Skills:
AWSCC++DevsecopsGCPJavaNist Cybersecurity FrameworkOwasp Top TenPolicy-As-CodePython
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
