IT SOX Lead

Job description

JPMorgan Chase & Co. (NYSE: JPM) is a leading global financial services firm with assets of $2.6 trillion and operations worldwide. The firm is a leader in investment banking, financial services for consumers and small business, commercial banking, financial transaction processing, and asset management. A component of the Dow Jones Industrial Average, JPMorgan Chase & Co. serves millions of consumers in the United States and many of the world's most prominent corporate, institutional and government clients under its J.P. Morgan and Chase brands. Information about JPMorgan Chase & Co. is available at www.jpmorganchase.com .

Corporate Technology & Risk (CTR) delivers streamlined and consistent solutions supporting JPMorgan Chase's Controls, Compliance, Legal, HR and IT Risk agendas, with a focus on stability, delivery, efficiencies and people. The goal of CTR's drive to standardization, consistency and simplicity is a JPMorgan Chase architecture that fosters long-term productivity, quality and innovation across the entire enterprise. The disciplines within this organization are Compliance Technology, Oversight & Controls Technology, Legal & e-Discovery, Identity & Access Management, IT Risk & Controls, HR Real Estate & Global Services Technology, and Third Party Risk Management.

Technology Controls Framework and practices' purpose is to ensure the security and resiliency of the Firm's computing environment, protect customer and employee confidential information, and comply with regulatory requirements globally. We accomplish this through strong information security leadership and active collaboration with line of business information risk managers to provide high quality security solutions and services that are focused on improving the Firm's risk posture .

IT Risk and Controls: Oversight and governance of IT Risk across the firm including IT Risk posture, IT Risk assessment framework, IT regulatory compliance and IT policies and standards. In responding to this growth the Central Technology Controls Office (CTCO), is responsible for delivering a well controlled, resilient, compliant and secure technology environment through proactive risk and controls management and an embedded self sustaining controls culture. As a 1 st Line of defense function CTCO work in partnership with our CIOs, CTOs, TCOs, ADMs, DBAs, etc. to deliver continuous improvement of our technology controls environment. CTCO provide the framework, methodology, tools and expertise to help design and embed a robust world class controls environment. In addition, we provide the necessary oversight and continuous assessment of Global Technology's risk and controls profile.

IT Sox Lead will assist in managing the Global Technology SOX Governance & Oversight Program. This position will report to the IT Sox Program Manager .


Responsibilities Include:
· Provide governance and oversight into the controls design and testing of the firm's IT General Controls (ITGCs) as related to the corporate SOX program. This would include: oversight and support during the annual scoping processes, ITGC controls design and testing guidance, review and analyses of individual deficiencies and oversight into determination of Significant Deficiencies and/or Material Weaknesses.
· Interact with Corporate SOX Compliance Office (SCO), from the Global Finance Controller's Office, who manage the firmwide SOX program. Represent technology as well as interpret directives for impact to technology.
· Lead a forum of the firm's IT SOX testing community to ensure consistent testing practices and discussion of best practices. Conduct annual IT SOX testers' training programs in conjunction with the SCO.
· Publish monthly reports, or more frequently as needed, on the IT SOX program, including attainment of firmwide testing targets, analysis of deficiencies, etc.
· Develop relationship with both Internal Audit and the external audit technology examination team. Understand direction and areas of focus, and controls themes coming from SSAE16 reviews.
· Work with the SCO to publish annual official IT SOX Program memorandum. As required by the SCO, contribute to regular reports to the Board of Directors' Audit Committee on the status of the IT SOX program.

Desired profile

· Minimum 8 years of work experience in Technology Audit, Controls, Regulatory Management or Information Risk, with at least 3 years experience managing or directly participating in IT General Controls testing for SOX and/or SSAE16 audits.
· Ability to effectively partner/influence in a highly matrixed organization.
· Proficient in MS Office (Word, Excel, Access, and Power Point).
· Excellent oral and written communication skills.
· Ability to deliver high quality results under tight deadlines.
· Attention to detail.
· Bachelor's degree or equivalent experience required, ideally in a technology, compliance or financial discipline