Assessments and Exercises Director

Testing Site - JPMC; Greater London; On-site; GBP 110,000 - 140,000; Full time

Job summary

Testing Site - JPMC seeks an Assessments & Exercises Director within the Cybersecurity Testing & Controls (CTC) team to strengthen our security and resiliency posture. You will plan and execute testing engagements to identify risks across people, processes, and technology, and present findings to senior leaders.

You will collaborate with cross-functional teams, leverage threat intelligence, and drive improvements through data-driven decisions while engaging with regulators and industry peers.

Qualifications

• Ability to implement complex assessments or exercises with diverse stakeholders and senior leaders.
• Strong understanding of threat landscape, resiliency concerns, and relevant laws, policies and ethics.
• Expertise in security assessment methodologies, threat intelligence, control evaluation, or resiliency testing.
• Experience presenting to senior leaders, regulators and industry groups.

Responsibilities

• Lead risk-driven testing and simulations, including penetration tests, technical controls assessments, cyber exercises, and resiliency simulations.
• Develop and implement operational plans and strategies aligning with organizational objectives.
• Create comprehensive assessment reports with actionable recommendations for leadership.
• Escalate trends in observations and report on controls effectiveness and operational risk.
• Influence cross-functional teams to drive continuous improvement through data-driven decisions.
• Use threat intelligence to stay informed about emerging threats, vulnerabilities, and best practices.
• Engage with internal and external stakeholders, including industry peers and government agencies, to share insights and contribute to policy development.

Skills

Collaborative assessments

Executive briefings

Security assessments

Threat landscape awareness

Education

Cyberspace / Homeland Security / Emergency Management / Information Assurance / Banking & Finance degree

Certifications: CISSP/CISM/OSCP

Job description

Join us to shape the future of cybersecurity and resilience. You will lead impactful initiatives that safeguard our organization and drive continuous improvement. Your expertise will empower us to proactively identify and address risks, ensuring we stay ahead in a rapidly evolving threat landscape. We value your ability to collaborate, influence, and deliver results that matter. Discover opportunities for growth and make a difference with us.

Job Summary:
As an Assessments & Exercises Director in the Cybersecurity Testing & Controls (CTC) team, you will lead efforts to strengthen our cybersecurity and resiliency posture. You will plan and implement testing engagements to identify risks and vulnerabilities across people, processes, and technology. Your experience in conducting assessments across diverse systems will help us resolve complex cyber and resiliency risks. By analyzing and articulating vulnerabilities, you will enable us to enhance our security strategy and mitigate risks.

Job Responsibilities:

• Develop and implement operational plans and strategies that align with organizational objectives
• Lead risk-driven testing and simulations, including penetration tests, technical controls assessments, cyber exercises, and resiliency simulations
• Create comprehensive assessment reports with actionable recommendations and communicate outcomes to leadership
• Escalate thematic trends in observations and report on controls effectiveness and operational risk
• Influence and partner with cross-functional teams to drive continuous improvement through data-driven decisions
• Utilize threat intelligence and security research to stay informed about emerging threats, vulnerabilities, and industry best practices
• Lead engagement with internal and external stakeholders, including industry peers and government agencies, to share insights and contribute to policy development

Required Qualifications, Capabilities, and Skills:

• Demonstrated ability to implement complex assessments or exercises collaboratively with diverse stakeholders, subject matter experts, and senior leaders
• Strong understanding of the current threat landscape and resiliency concerns, as well as relevant laws, regulations, policies, and ethics
• Expertise in security assessment methodologies, threat intelligence utilization, control evaluation techniques, or resiliency testing
• Experience developing and presenting briefings to senior leaders and large audiences, facilitating meetings, resolving conflicts, and providing program updates to senior leaders, regulators, and industry groups

Preferred Qualifications, Capabilities, and Skills:

• BS/MS degree in Cyberspace, Homeland Security, Emergency Management, Information Assurance, or Banking/Finance
• Relevant industry certifications such as CISSP, CISM, or OSCP, demonstrating advanced expertise in cybersecurity and offensive testing methodologies or resiliency
• Familiarity with US and key international financial systems