Vice President, Supplier Cybersecurity & Risk Assessments

Aumni; Metro Manila; On-site; PHP 3,500,000 - 6,500,000; Full time

Job summary

J.P. Morgan is seeking a Supplier Cybersecurity Controls Assessor Vice President to lead technology and cybersecurity control assessments of supplier environments.

You will evaluate evidence, document control gaps, and drive remediation plans with stakeholders to strengthen third‑party risk management. You will communicate clearly with senior stakeholders, influence decisions, and help evolve assessment approaches for consistency and impact across the global supplier ecosystem.

Qualifications

• 7 years of experience in technology risk and controls, technology audit, cybersecurity, or third‑party risk management within a large enterprise environment.
• Experience performing technology and cybersecurity control assessments of third parties or external suppliers.
• Working knowledge of industry risk and control frameworks (e.g., ISO 27001, NIST Cybersecurity Framework).
• Experience assessing domains: application security, cloud security (SaaS, PaaS, IaaS), network security, or cyber resiliency.
• Demonstrated ability to identify control gaps, document findings, and translate technical issues into clear risk statements.
• Experience developing or evaluating remediation action plans and validating control implementation.
• Strong written communication skills, including concise reporting and stakeholder‑ready summaries.
• Strong verbal communication and presentation skills with senior stakeholders.
• Demonstrated ability to challenge and influence decisions appropriately, including constructive pushback when needed.

Responsibilities

• Review supplier assessment questionnaires and supporting evidence to confirm completeness and quality.
• Lead on-site or virtual supplier assessments and facilitate assessment discussions.
• Assess supplier infrastructure, applications, and security practices against defined control expectations.
• Identify, document, and communicate control gaps and vulnerabilities in supplier environments.
• Partner with stakeholders to develop remediation action plans and track progress to closure.
• Evaluate risk acceptance requests when control compliance cannot be achieved and document rationale.
• Recommend practical risk mitigation options that improve supplier security posture.
• Identify process improvement opportunities that increase assessment efficiency and consistency.
• Support education and knowledge sharing on supplier cybersecurity risk and controls.
• Escalate significant supplier issues in a timely manner through appropriate channels.

Skills

Technology risk

Controls assessments

Technology audit

Cybersecurity

Third‑party risk management

ISO 27001

NIST CSF

Application security

Cloud security

Network security

Cyber resiliency

Remediation plans

Communication skills

Senior stakeholder communication

Influence and pushback

Tools

SOC 2 reports

ISO 27001 evidence

ISAE 3402 Type II reports

Job description

J.P. Morgan is seeking a Supplier Cybersecurity Controls Assessor Vice President to lead technology and cybersecurity control assessments of supplier environments.

You will evaluate evidence, document control gaps, and drive remediation plans with stakeholders to strengthen third‑party risk management. You will communicate clearly with senior stakeholders, influence decisions, and help evolve assessment approaches for consistency and impact across the global supplier ecosystem.