Address
Form of workJOB DESCRIPTION
ABOUT THE TEAM
The Cybersecurity & Technology Controls group at JPMorgan Chase aligns the firm’s cybersecurity, access management, controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group’s number one priority is to enable the business by keeping the firm safe, stable and resilient.
As a Cybersecurity Operations, Data Loss Prevention Content Developer, at JPMorgan Chase within the Cybersecurity and Technology Controls team, your work will have a critical impact on our company, as well as our clients and our business partners around the world. You’ll work with a highly motivated team focused on delivering solutions built to stop adversaries and strengthen our operations. Your work will contribute to identify and build indicators of insider threats and prevent sensitive data loss through world class tools and technologies.
Our Data Loss Prevention team performs many functions in support of data security at the firm. The team develops world class solutions for detection and prevention of sensitive information leaving the firm based on in-depth analysis. In addition, the team develops new data identifiers, builds and maintains tools and capabilities for data loss triage prioritization, analyzes trends and patterns of Data Loss Prevention activity and works with stakeholders to reduce the risk of data loss across all lines of business.
Job Responsibilities:
- Design, configure and implement DLP policies on Microsoft Information Protection (Microsoft Purview) suite and Symantec DLP at an enterprise level
- Automate deployment and run maintenance smoothly using scripting skills and analytical capabilities
- Provide expertise and guidance in management, configuration and optimizations of Microsoft O365 security solutions
- Contribute to development of new data identifiers, data governance policies, standards and procedures ensuring compliance and data integrity
- Collaborate with stakeholders, business and technology groups to provide guidance, advice on best practices, define data management requirements, establish effective controls, practices and procedures
- Use knowledge and expertise to respond to incidents, perform risk reviews, vulnerability assessments and identify new and emerging threats
- Use expertise to deliver cost-effective solutions and leverage communication and presentation skills to engage senior leaders on important issues and updates
- Assist in technology and process improvement efforts, with a goal to refine detection and prioritization capabilities
- Analyze trends and patterns in DLP activity and work with stakeholders to reduce the risk of data loss across all lines of business
Required qualifications, capabilities, and skills
- 5 or more years of Cybersecurity Operations or Security Operation Center (SOC) related experience
- Bachelor’s degree in Computer Science, Information Systems or related field
- Excellent command of cybersecurity organization practices, data loss prevention concepts, security incident triage, insider threat, operations risk management principles and processes, architectural requirements, emerging threats and vulnerabilities, and incident response methodologies
- Excellent analytical and problem-solving skills with the ability to translate complex technical concepts into practical solutions
Preferred qualifications, capabilities, and skills
- Possess two or more of the following certifications - Microsoft Certified: Security, Compliance and Identity Fundamentals, Cybersecurity Architect Expert, Security Operations Analyst Associate, Azure Security Engineer, CISSP/CCSP, Splunk Certified Power User
- Experience with Agile methodology and the ability to work with at least one of the common frameworks with knowledge of tools like Confluence, JIRA and ServiceNow
- Ability to identify network attacks and systemic security issues as they relate to threats and vulnerabilities, with a focus on recommendations for enhancements or remediation
- Good understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity and foundational knowledge of computer forensics; legal, government and jurisprudence as they relate to cybersecurity; operating systems; and methods for intelligence gathering and sharing
JPMorgan Chase & Co., one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
We recognize that our people are our strength and the diverse talents and perspectives that they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. In accordance with applicable law, we make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as any mental health or physical disability needs. (If you are a US or Canadian applicant with a disability and wish to request an accommodation to complete the application process, please contact us by calling the Accessibility Line (US and Canada Only) 1-866-777-4690 and indicate the specifics of the assistance needed.)
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set, and location. For those in eligible roles, we offer discretionary incentive compensation which may be awarded in recognition of firm performance and individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
JPMorgan Chase is an Equal Opportunity Employer, including Disability/Veterans
ABOUT THE TEAM
The Cybersecurity & Technology Controls group at JPMorgan Chase aligns the firm’s cybersecurity, access management, controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group’s number one priority is to enable the business by keeping the firm safe, stable and resilient.
High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of the integrity of staff by virtue of 1) sensitive cybersecurity and technology functions they perform within systems or 2) information they receive regarding sensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hire screening which includes both criminal and credit background checks (as allowed by law). The enhanced screening will need to be successfully completed prior to commencing employment or assignment.
