Penetration Test Governance & Vendor Strategy Lead

Aumni; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

J.P. Morgan is seeking a vendor management lead for the Penetration Testing program in London. This role focuses on governance, performance, and quality assurance across third-party testing, acting as the primary liaison between Pen Testing and broader governance forums.

It is a service delivery, governance, and commercial role with strong technical and strategy elements. Candidates from security consulting or financial services backgrounds have an advantage.

Qualifications

• Proven experience in vendor management and program oversight in a large, matrixed organization.
• Ability to produce crisp, executive-ready status reporting.
• Strong understanding of penetration testing delivery models and offensive security space.
• Experience driving governance with clear KPI reporting and action follow-through.
• People management experience in a small team.

Responsibilities

• Own vendor management for penetration testing delivery, including performance management and continuous improvement.
• Establish and maintain program-wide delivery standards and ensure vendor adherence.
• Run vendor governance cadences with KPI reporting and escalation management.
• Oversee Penetration Testing strategy execution and delivery roadmaps.
• Link Penetration Testing with wider governance forums to align priorities.
• Coordinate with product/engineering, procurement and finance to support governance.
• Lead a small team through direction setting, blocking removal and coaching.

Skills

Vendor management

Program oversight

Roadmap planning

Milestone tracking

Dependency management

RAID risk tracking

Executive reporting

Stakeholder management

Governance forums

Multi-workstream governance

Job description

J.P. Morgan is seeking a vendor management lead for the Penetration Testing program in London. This role focuses on governance, performance, and quality assurance across third-party testing, acting as the primary liaison between Pen Testing and broader governance forums.

It is a service delivery, governance, and commercial role with strong technical and strategy elements. Candidates from security consulting or financial services backgrounds have an advantage.