Michael Gandara

Information

Michael Gandara leads the Global Technology Governance, Risk and Compliance (GRC) function for JPMorgan Chase & Co and a member of the Global Technology Operating Committee. In this capacity, Mike is accountable for maintaining a robust and consistent risk management practice and control environment for technology supporting the Bank’s stakeholders, including customers, employees, and the community. His role involves establishing and maintaining an industry-leading risk and controls framework, driven by regulatory and threat awareness. This involves overseeing technology policies, standards, control objectives and procedures, coupled with a comprehensive program of assessments, executive reporting, and governance. Mike is at the forefront of driving transformation and innovation in technology risk and control. Before taking on his current position, Mike served as the Chief Auditor of Global Technology at JP Morgan Chase & Co and was a member of the Audit Operating Committee. In this capacity, he held responsibility for supervising audit coverage of the firm’s Global Technology business and board reporting. Mike has over 35 years of technology risk, control, cyber security and operations within the global financial services sector. Before returning to JPMorgan Chase in 2016, he held the position of Chief Controls Officer for Barclaycard Operations and Technology. In the earlier stages of his career, Mike spent seven years at JPMorgan Chase as the Global Information Risk Manager and Head of Business Resiliency for the Corporate & Investment Bank and Technology. Mike holds a Bachelor of Science from Pace University and is a Certified Information Systems Auditor (CISA), certified in Governance of Enterprise IT (CGEIT) and Risk and Information Systems Control (CRISC). He also co-authored the article, “E-Commerce: Audit the Rage” which received the Thurston Award for literary excellence by the Institute of Internal Auditors (IIA).