VP, Supplier Cybersecurity Controls & Risk Assurance

JPMorgan Chase & Co.; Taguig; On-site; PHP 1,200,000 - 2,100,000; Full time

Job summary

J.P. Morgan is seeking a Supplier Cybersecurity Controls Assessor Vice President to lead technology and cybersecurity control assessments of supplier environments, aiming to manage third‑party risk.

You will evaluate evidence, document control gaps, and drive remediation plans with stakeholders, communicating clearly with senior leaders. You will help evolve assessment approaches and support risk acceptance decisions when needed, contributing to improved consistency and efficiency across

Qualifications

• 7+ years of experience in technology risk and controls, technology audit, cybersecurity, or third-party risk management within a large enterprise.
• Experience performing technology and cybersecurity control assessments of third parties or external suppliers.
• Working knowledge of industry risk and control frameworks (e.g., ISO 27001, NIST Cybersecurity Framework).
• Experience assessing domains such as application security, cloud security, network security, or cyber resiliency.

Responsibilities

• Review supplier assessment questionnaires and supporting evidence for completeness and quality.
• Lead on-site or virtual supplier assessments and facilitate assessment discussions.
• Assess supplier infrastructure, applications, and security practices against control expectations.
• Identify, document, and communicate control gaps and vulnerabilities in supplier environments.
• Partner with stakeholders to develop remediation action plans and track progress to closure.
• Evaluate risk acceptance requests when control compliance cannot be achieved and document rationale.
• Recommend practical risk mitigation options to improve supplier security posture.
• Identify process improvement opportunities to increase assessment efficiency and consistency.
• Support education and knowledge sharing on supplier cybersecurity risk and controls.
• Escalate significant supplier issues through appropriate channels.

Skills

Technology risk

Cybersecurity

Third-party risk

ISO 27001

NIST CSF

Application security

Cloud security

Stakeholder comms

Risk assessment

Remediation planning

Job description

J.P. Morgan is seeking a Supplier Cybersecurity Controls Assessor Vice President to lead technology and cybersecurity control assessments of supplier environments, aiming to manage third‑party risk.

You will evaluate evidence, document control gaps, and drive remediation plans with stakeholders, communicating clearly with senior leaders. You will help evolve assessment approaches and support risk acceptance decisions when needed, contributing to improved consistency and efficiency across