VP-Level Supplier Cybersecurity Strategist

JPMorgan Chase & Co.; Warszawa; On-site; PLN 260,000 - 420,000; Full time

Job summary

JPMorgan Chase & Co. in Warsaw, Poland, seeks a Supplier Cybersecurity Assessor with 7–9 years of enterprise cyber risk experience. You will assess third-party supplier controls, review cloud and on-prem environments, and partner with stakeholders to determine risk impacts and remediation priorities.

You will drive improvements to assessment practices, leverage approved AI tools, and support governance and reporting of supplier risks for a globally regulated financial services firm.

Qualifications

• 7–9 years of experience in cybersecurity, technology risk, or related disciplines in a large enterprise.
• Expertise in cloud security, application/security controls, IAM, data protection, and incident response.
• Familiarity with ISO 27001/27002 and NIST CSF frameworks.
• Ability to assess controls, evaluate evidence, and support risk-based decisions.
• Excellent written and verbal communication for senior stakeholders.

Responsibilities

• Conduct cybersecurity and technology control assessments of supplier environments, including cloud-hosted services.
• Review supplier security architectures, controls, processes, and supporting evidence.
• Partner with stakeholders to evaluate control effectiveness and identify risk exposures.
• Assess supplier adherence to industry standards and best practices.
• Document findings, risk impacts, and remediation recommendations.
• Translate technical observations into business risk outcomes and recommendations.
• Monitor emerging threats to strengthen assessment quality.
• Drive improvements to assessment methodologies, standards, and reporting.
• Leverage approved AI-enabled tools to enhance preparation, documentation, and analysis with oversight.
• Support governance, escalation, and reporting related to supplier cybersecurity risks.

Skills

Cybersecurity

Risk assessment

Cloud security

ISO 27001/27002

NIST CSF

Stakeholder influence

Communication to senior stakeholders

AI-enabled tool usage

Certification: CISSP/CISA/CISM/CCSP/CR

Job description

JPMorgan Chase & Co. in Warsaw, Poland, seeks a Supplier Cybersecurity Assessor with 7–9 years of enterprise cyber risk experience. You will assess third-party supplier controls, review cloud and on-prem environments, and partner with stakeholders to determine risk impacts and remediation priorities.

You will drive improvements to assessment practices, leverage approved AI tools, and support governance and reporting of supplier risks for a globally regulated financial services firm.