Penetration Testing Program & Vendor Strategy Lead

JPMorgan Chase; Greater London; On-site; GBP 110,000 - 165,000; Full time

Job summary

J.P. Morgan is seeking a Penetration Testing Vendor Management Lead to own delivery excellence across third-party testing programs. This governance and commercial role supports program-level oversight, working with Penetration Testing and wider governance forums.

You will bridge product, engineering, procurement and finance, coaching a small team and driving KPI-driven reporting, issue resolution, and continuous improvement without performing hands-on testing.

Qualifications

• Proven experience in vendor management and program oversight in a large organization.
• Ability to produce crisp, executive-ready status reporting.
• Strong understanding of penetration testing delivery models and offensive security.

Responsibilities

• Own vendor management for penetration testing delivery, including performance management, issue resolution, and continuous improvement.
• Establish and maintain program-wide delivery standards and ensure vendor adherence.
• Run vendor governance cadences with KPI-driven reporting, action tracking, and escalation management.
• Own program management oversight of Penetration Testing strategy execution, including maintaining delivery roadmaps and plans, tracking milestones and dependencies, and driving disciplined status reporting.
• Serve as the primary link between Penetration Testing and wider strategic functions and governance forums to align priorities, reporting, and cross-team initiatives.
• Coordinate with partner teams (e.g., product/engineering, procurement, finance) to support governance and program execution.
• Lead a small team by setting direction, allocating work, removing blockers, and building team capability through ongoing coaching and feedback.

Skills

Vendor management

Program oversight

Governance

KPI reporting

Stakeholder management

People management

Offensive security

Executive communication

Job description

J.P. Morgan is seeking a Penetration Testing Vendor Management Lead to own delivery excellence across third-party testing programs. This governance and commercial role supports program-level oversight, working with Penetration Testing and wider governance forums.

You will bridge product, engineering, procurement and finance, coaching a small team and driving KPI-driven reporting, issue resolution, and continuous improvement without performing hands-on testing.