VP, Supplier Cybersecurity Controls & Risk

JPMorganChase; Philippines; On-site; PHP 1,800,000 - 2,400,000; Full time

Job summary

J.P. Morgan seeks a Supplier Cybersecurity Controls Assessor Vice President to lead cyber risk assessments of supplier environments and manage third-party risk. You will evaluate evidence, document gaps, and drive remediation plans with stakeholders to improve overall supplier security posture.

You will communicate clearly with senior leaders and help evolve assessment approaches for consistency and impact, enabling effective risk decisions and risk acceptance when needed.

Qualifications

• 7+ years in tech risk, controls, cybersecurity, or third-party risk in a large enterprise
• Experience assessing third parties or external suppliers
• Working knowledge of ISO 27001 and NIST CSF frameworks
• Experience in app security, cloud security, network security, or cyber resiliency
• Ability to translate technical issues into clear risk statements for senior stakeholders
• Experience developing remediation action plans and validating control implementation
• Strong reporting and stakeholder communication skills

Responsibilities

• Review supplier assessment questionnaires and evidence for completeness and quality
• Lead on-site or virtual supplier assessments and facilitate discussions
• Assess supplier infrastructure, applications and security practices vs defined controls
• Identify and communicate control gaps and vulnerabilities
• Develop remediation action plans with stakeholders and track progress
• Evaluate risk acceptance requests and document rationale
• Recommend practical risk mitigations to improve security posture
• Identify opportunities to improve assessment efficiency and consistency
• Support education and knowledge sharing on supplier cybersecurity risk and controls
• Escalate significant issues through proper channels

Skills

Technology risk & controls

Third-party risk assessments

ISO 27001 / NIST CSF

Application/cloud/ network security

Risk communication

remediation planning

Stakeholder influence

Education

CISSP / CISA / CISM / CCSP / CRISC

Job description

J.P. Morgan seeks a Supplier Cybersecurity Controls Assessor Vice President to lead cyber risk assessments of supplier environments and manage third-party risk. You will evaluate evidence, document gaps, and drive remediation plans with stakeholders to improve overall supplier security posture.

You will communicate clearly with senior leaders and help evolve assessment approaches for consistency and impact, enabling effective risk decisions and risk acceptance when needed.