Penetration Testing Program & Vendor Strategy Lead

J.P. MORGAN; City Of London; On-site; GBP 90,000 - 130,000; Full time

Job summary

J.P. Morgan is seeking a governance and service-delivery lead for its Penetration Testing program in the UK. This role focuses on vendor management, quality assurance, and delivery excellence rather than hands-on testing.

You will coordinate with security, product, procurement, and finance teams to align strategy, governance forums, and KPI reporting. A strong technical understanding of offensive security will help shape test delivery while maintaining vendor performance.

Qualifications

• Proven vendor management and program oversight experience in a large, matrixed org.
• Strong program management: roadmaps, milestones, dependencies, RAID risk/issue tracking, executive updates.
• Understanding of penetration testing delivery models and offensive security, able to challenge and steer.
• Strong stakeholder management to drive decisions across technical and non-technical audiences.
• Experience running governance forums with KPI reporting and action follow-through.
• Detail-oriented with ability to manage multiple priorities.
• Strong written and verbal communication, executive-ready updates.
• People management experience leading a small team.

Responsibilities

• Own vendor management for penetration testing delivery, including performance management and issue resolution.
• Establish and maintain program-wide delivery standards and ensure vendor adherence.
• Run vendor governance cadences with KPI reporting and escalation management.
• Oversee Penetration Testing strategy execution with roadmaps and milestone tracking.
• Serve as the link between Penetration Testing and wider governance forums.
• Coordinate with product/engineering, procurement, and finance to support governance.
• Lead a small team, setting direction and coaching members.

Skills

Vendor management

Program oversight

Governance

Stakeholder management

Executive reporting

People management

Job description

J.P. Morgan is seeking a governance and service-delivery lead for its Penetration Testing program in the UK. This role focuses on vendor management, quality assurance, and delivery excellence rather than hands-on testing.

You will coordinate with security, product, procurement, and finance teams to align strategy, governance forums, and KPI reporting. A strong technical understanding of offensive security will help shape test delivery while maintaining vendor performance.