VP, Supplier Cybersecurity Controls & Risk Assessments

JPMorgan Chase & Co.; Metro Manila; On-site; PHP 3,500,000 - 6,000,000; Full time

Job summary

JPMorgan Chase & Co. in Metro Manila seeks a Vice President Supplier Cybersecurity Controls Assessor to lead assessments of supplier environments, evaluate evidence, and drive remediation plans that strengthen third-party risk controls.

This role requires deep experience in technology risk, control frameworks, and strong communication with executives. You will partner with stakeholders and senior leaders to translate complex findings into clear risk statements, improve assessment approaches, and

Qualifications

• 7+ years of experience in technology risk, controls, auditing, or third‑party risk management.
• Experience performing technology and cybersecurity control assessments of third parties or external suppliers.
• Working knowledge of industry risk and control frameworks (e.g., ISO 27001, NIST CSF).
• Experience assessing domains: application security, cloud security (SaaS, PaaS, IaaS), network security, or cyber resiliency.
• Strong written communication skills, including concise reporting and stakeholder-ready summaries.
• Experience developing or evaluating remediation action plans and validating control implementation.

Responsibilities

• Review supplier assessment questionnaires and supporting evidence to confirm completeness and quality.
• Lead on-site or virtual supplier assessments and facilitate assessment discussions.
• Assess supplier infrastructure, applications, and security practices against defined control expectations.
• Identify, document, and communicate control gaps and vulnerabilities in supplier environments.
• Partner with stakeholders to develop remediation action plans and track progress to closure.
• Evaluate risk acceptance requests when control compliance cannot be achieved and document rationale.
• Recommend practical risk mitigation options that improve supplier security posture.
• Identify process improvement opportunities that increase assessment efficiency and consistency.
• Support education and knowledge sharing on supplier cybersecurity risk and controls.
• Escalate significant supplier issues in a timely manner through appropriate channels.

Skills

Technology risk & controls

Cybersecurity assessments

Third-party risk management

ISO 27001 / NIST CSF

Application / Cloud / Network security

Risk communication

Stakeholder engagement

Job description

JPMorgan Chase & Co. in Metro Manila seeks a Vice President Supplier Cybersecurity Controls Assessor to lead assessments of supplier environments, evaluate evidence, and drive remediation plans that strengthen third-party risk controls.

This role requires deep experience in technology risk, control frameworks, and strong communication with executives. You will partner with stakeholders and senior leaders to translate complex findings into clear risk statements, improve assessment approaches, and