Senior Director, Third-Party Cybersecurity Assurance

JPMorganChase; Bournemouth; On-site; GBP 150,000 - 190,000; Full time

Job summary

J.P. Morgan in the United Kingdom is seeking an Executive Director to lead third‑party cybersecurity assurance within the Cybersecurity and Technology Controls (CTC) Assessments & Exercises function.

You will serve as the senior technical authority on control maturity for the firm's most complex suppliers. You will translate technical findings into business risk insights for senior stakeholders, drive methodological improvements, and collaborate with cross‑functional leads to ensure alignment of

Qualifications

• 10+ years of professional experience in cybersecurity, with senior technical or architecture-focused roles.
• Ability to assess and articulate the cybersecurity control maturity of complex environments (enterprise, cloud-native, hybrid).
• Deep hands-on expertise in cybersecurity architecture, threat modelling, and secure controls design for enterprise solutions.
• Strong understanding of industry frameworks and control domains (NIST CSF, ISO 27001, FFIEC, SOC 2, GDPR).
• Experience across major cloud providers (AWS, Azure, Google Cloud) with relevant certifications advantageous.
• Proficiency with CSPM tools and cloud security assessment methodologies.

Responsibilities

• Provide authoritative technical leadership across third-party cybersecurity assessments.
• Lead and conduct in-depth evaluations of supplier cybersecurity posture and architectural resilience.
• Perform threat modelling against supplier environments and develop mitigation strategies.
• Evaluate supplier cloud architectures across AWS, Azure, and Google Cloud.
• Act as senior technical escalation point for complex supplier risks and remediation strategies.
• Drive evolution of third-party assurance methodology with deeper technical assessment capabilities.
• Translate technical risks into clear risk insights for senior leadership.
• Collaborate with Product Security and Cybersecurity teams to align controls and remediation.
• Lead thematic analysis to identify systemic weaknesses and remediation approaches.

Skills

Cybersecurity architecture

Cloud security

Threat modelling

Enterprise controls

NIST CSF ISO 27001 GDPR

Public cloud (AWS Azure GCP)

CSPM tools

Technical leadership

Job description

J.P. Morgan in the United Kingdom is seeking an Executive Director to lead third‑party cybersecurity assurance within the Cybersecurity and Technology Controls (CTC) Assessments & Exercises function.

You will serve as the senior technical authority on control maturity for the firm's most complex suppliers. You will translate technical findings into business risk insights for senior stakeholders, drive methodological improvements, and collaborate with cross‑functional leads to ensure alignment of