Security Operations Vice President, Vulnerability Management

JPMorganChase; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

JPMorganChase seeks a Security Operations Vice President to lead Vulnerabilities Management within the Singapore team. You will work with Line of Business teams, SMEs, Production Management, Product Owners, and risk functions to manage vulnerabilities across applications and infrastructure globally.

You will guide risk decisions, oversee incident response coordination, and drive AI-enhanced triage and remediation efforts while maintaining strong security controls and auditability.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Data Science, or related disciplines.
• 5+ years' experience in a Cyber Operations/Vulnerability Management role with knowledge of end-to-end vulnerability management workflows (CVE, CVSS).
• Experience coordinating Incident Management and/or cyber incident response with cross-team alignment.

Responsibilities

• Review new vulnerabilities published from multiple sources and identify those that may pose risk to the firm.
• Define an accurate risk rating in line with proprietary and industry standard risk rating methodologies.
• Use enterprise AI capabilities to accelerate security investigation triage and incident reporting, validating outputs and handling data securely.
• Document impacted assets and provide a detailed write-up on risk and exposure posed by vulnerabilities.
• Assess threat intelligence and exploit code to determine attack vectors.
• Recommend risk mitigation factors and define remediation activities if known.
• Assess vulnerabilities with AI-assisted workflows and ensure outputs align to security and audit requirements.
• Drive global teams' workflows through case-load analysis and prioritize, acting as technical lead on major incidents.
• Build strong relationships with Cybersecurity Operations and regional technology leaders.

Skills

Cyber Operations

Vulnerability Management

Incident Management

Cloud security

Splunk/ SIEM

APIs/JSON/SQL

Agile practices

AI-assisted security workflows

24x7 operations

Education

Bachelor's Degree in Computer Science/Cybersecurity/Data Science or related

Tools

Oracle Java

VMware

F5

Citrix

Microsoft software

Job description

Job Description

Vulnerability Management Operations is responsible for the firm-wide impact analysis, overall risk assessment, and coordination/communication of critical vulnerabilities identified as impacting JPMorgan Chase applications and/or infrastructure components. This function is performed globally and at the scale of which JPMC operates by coordinating a response that could be firm-wide or application specific. The team's actions are performed using a risk-based approach considering the criticality of the vulnerability and the ability for our Line of Business partners to service their clients and customers globally.

Job Description

Vulnerability Management Operations is responsible for the firm-wide impact analysis, overall risk assessment, and coordination/communication of critical vulnerabilities identified as impacting JPMorgan Chase applications and/or infrastructure components. This function is performed globally and at the scale of which JPMC operates by coordinating a response that could be firm-wide or application specific. The team's actions are performed using a risk-based approach considering the criticality of the vulnerability and the ability for our Line of Business partners to service their clients and customers globally.

As a Security Operations Vice President in Cybersecurity & Tech Controls, Vulnerabilities Management Team, you will be a key member of the Singapore team, as part of a follow-the-sun global team. You will work directly with Line of Business Application Teams, Subject Matter Experts, Production Management Teams, Product Owners, Senior Technology Management, External Vendors and Risk and Control functions. You'll be on the front lines of managing vulnerabilities by making critical decisions on the inherent risk to the infrastructure or the application itself and thus the risk to the firm clients & customers. You will be working with a highly-motivated team laser-focused on analyzing, scoping, developing and delivering solutions built to stop adversaries and strengthen our security posture. Your research and work will ensure stability and resiliency of our current technology products, emerging technology and our vast application estate. Working in tandem with various internal teams both in Cyber and various Line of Business partners, as well as technologists and innovators across our global network, by leading the positive actions that will stop adversaries and strengthen customer's confidence.

Job Responsibilities

• Review new vulnerabilities published from multiple sources and identify those that may pose risk to the firm.
• Define an accurate risk rating in line with proprietary and industry standard risk rating methodologies.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate security investigation triage and incident reporting, validating outputs and handling operational data according to sensitivity and security requirements.
• Document impacted assets and/or application(s) providing a detailed write up on the risk and exposure posed by vulnerabilities.
• Assess threat actor intelligence, exploit code, and/or conceptual code to determine attack vectors.
• Recommend any risk mitigation factors and define the remediation activity if known.
• Assess security researcher identified vulnerabilities to provide recommendations on remediation and identify additional risk
• Leverage AI tools to accelerate the triage and assessment of vulnerabilities, as well as improve the process workflow and documentation quality.
• Drive global teams' daily workflows through case-load analysis and prioritization, while serving as the technical lead and representative on major incidents impacting the Vulnerability Management space.
• Demonstrate the ability to develop and form strong working relationships with the partnering Cybersecurity Operations functions and key technology leaders in the region.
• Drives reuse-first adoption of AI-assisted workflows to enhance threat detection and response processes, ensuring outputs are validated and aligned to security, resiliency, and auditability expectations.

Required Qualifications, Capabilities, And Skills

• Bachelor's Degree in Computer Science, Cybersecurity, Data Science, or related disciplines
• 5+ years' experience in a Cyber Operations/Vulnerability Management role with a strong knowledge of operational processes supporting Vulnerability Management and the wider Security Operations Center; with the ability to demonstrate comprehension of the end-to-end Vulnerability Management workflow (to include industry standards such as CVE, CPE, CVSS).
• Demonstrated experience coordinating Incident Management and/or cyber incident response, including cross-team alignment and clear stakeholder communications.
• Strong and broad understanding of Cyber Security Controls (Physical, Logical, Processes and Procedures).
• Strong and broad understanding of leading vendor products/applications e.g., Oracle [Java], VMWare, F5, Citrix, Microsoft; to include product lifecycle & release schedules.
• Strong and broad understanding of open-source software deployment in a large technology estate.
• Strong understanding of cloud (public and private) environments, along with familiarity in cyber vulnerability detection and scanning tools.
• Experience working with data sources using SQL, JSON, APIs, and Splunk, alongside Agile practices, including managing remediation actions through an active backlog and Jira.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support security operations workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted investigation findings and recommendations before implementation, escalating when uncertain and ensuring outcomes align to security and auditability expectations.
• Previous 24 x 7 operations experience.

Preferred Qualifications, Capabilities, And Skills

• Have an aptitude for Vulnerability Research and Exploit Development (either from a professional background or by demonstrating an aptitude e.g. through capture the flag challenges).
• Experience with frontier AI models and the ability to conduct AI assisted vulnerability research.
• Be operationally focused and enjoy working in a dynamic environment, with the day-to-day focus on quick and timely risk reduction activities.

ABOUT US

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

About The Team

The Cybersecurity & Technology Controls group at JPMorganChase aligns the firm's cybersecurity, access management, controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group's number one priority is to enable the business by keeping the firm safe, stable and resilient.

High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of the integrity of staff by virtue of 1) sensitive cybersecurity and technology functions they perform within systems or 2) information they receive regarding sensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hire screening which includes both criminal and credit background checks (as allowed by law). The enhanced screening will need to be successfully completed prior to commencing employment or assignment.