Senior Product Security Architect
J.P. Morgan
Join us to make a direct impact in a fast-paced environment where your expertise drives secure innovation. As a Senior Product Security Architect, you’ll collaborate with talented engineers and business leaders to solve complex challenges and advance your skills. We value your passion for cybersecurity and your ability to inspire others. Here, you’ll help shape the future of an iconic company and enjoy opportunities for growth and mobility. Your contributions will be recognized and celebrated as you help us build a safer digital world.
Job Summary:
As a Senior Product Security Architect in the Cybersecurity & Technology Controls team for International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will empower teams to make decisive risk decisions at speed and scale, leveraging your technical and communication skills. You will embed security best practices into product development, serve as a subject matter expert, and help foster a culture of innovation and safety. Your role will challenge you and support your growth in a respected, forward-thinking organization.
Job Responsibilities:
- Cultivate a security-focused culture with product technology and business colleagues
- Embed threat modeling, security design, and architecture reviews into product and application teams
- Advocate for sustainable controls and real risk reduction outcomes
- Demonstrate fluency in product strategy, roadmap, and key investment programs
- Identify and learn unfamiliar technology components and business concepts
- Serve as the security thought leader and escalation point for IT Risk and Cyber domains
- Monitor Key Risk Indicators and manage emerging issues with urgency
- Communicate recommendations and identify root causes and key themes
- Partner across the product supply chain for audit, regulatory, and risk activities
- Collaborate with Third Party Oversight teams to manage technology risk for vendors, focusing on cloud and emerging technologies
Required Qualifications, Capabilities, and Skills:
- Hands-on experience delivering enterprise-level cybersecurity solutions and controls via threat modeling and security design reviews
- Advanced knowledge of cybersecurity architecture, applications, and technical processes in one or more technical disciplines (e.g., public cloud, AI, machine learning, mobile)
- Ability to solve design and functionality problems independently
- Effective communication skills with technical and non-technical stakeholders
- Strong written and verbal communication abilities
- Success in influencing peers across departments
- Ability to evaluate and recommend technologies for future state architecture
- Practical expertise in Product Security, including:
- Deploying products using cloud and container technologies (e.g., GCP, AWS, Kubernetes, Docker)
- Securing APIs and micro-services
- Securing SaaS tools and managing their security baseline posture
- Software supply chain security
Preferred Qualifications, Capabilities, and Skills:
- Experience operating in a regulated organization with a 3LoD model
- Willingness to challenge existing processes respectfully
- Experience translating policy or regulatory requirements into control design for software engineers and architects
- Proven ability to upskill and learn modern technologies
- Experience in financial services consumer businesses or Fintech organizations (e.g., mortgages, cards, digital)
#ICBCareers
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.
This is an excellent opportunity to join a world class Cybersecurity organization.
