VP, Offensive Security Assessments & Exercises

Next Frontier Capital; Singapore; On-site; SGD 250,000 - 360,000; Full time

Job summary

J.P. Morgan in Singapore seeks an Assessments & Exercises Vice President to drive advanced cybersecurity assessments and resilience testing.

You will lead offensive security simulations, validate controls, and shape risk-informed security strategy for enterprise-wide protection. The role emphasizes AI-assisted workflow adoption, cross-functional collaboration, and staying ahead of threats through threat intelligence and validated reporting.

Qualifications

• Bachelor’s Degree in Computer Science, Cybersecurity, Data Science, or related disciplines (or equivalent experience).
• 5+ years of experience in cybersecurity, with demonstrated exceptional organizational skills to plan, design, and coordinate offensive security assessments and simulation exercises.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support assessment workflows (e.g., analysis support and report drafting) with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted findings and remediation recommendations before use, escalating when uncertain and following security and data handling requirements.
• Knowledge of US financial services sector cybersecurity organization practices, operations risk management processes, principles, regulations, threats, risks, and incident response methodologies.
• Ability to identify systemic security issues as they relate to threats, vulnerabilities, or risks, with a focus on recommendations for enhancements or remediation.
• Experience working in information security within cloud-based environments (IaaS and PaaS) in both private and public environments (AWS, Azure).
• Demonstrated experience in Red Team/Purple Team operations, adversary emulation, threat hunting enablement, technical controls assessments, detection engineering validation, incident response readiness activities, and/or network exploitation operations.
• Strong understanding of operating systems, vulnerability techniques, and security tools; networking fundamentals; IaaS/PaaS concepts; DevOps; incident response; threat hunting; and log interpretation.

Responsibilities

• Design and execute offensive security-led testing and simulation activities—Purple Team engagements and adversary emulation to validate defenses and detection capabilities.
• Use enterprise-authorized AI capabilities to accelerate synthesis of test evidence and draft executive-ready assessment reporting with proper data handling.
• Evaluate controls for effectiveness and impact on operational risk and identify automation opportunities.
• Collaborate with cross-functional teams to develop comprehensive assessment reports with findings, risk assessments, root-cause analysis, and remediation recommendations.
• Utilize threat intelligence to stay informed about emerging threats and apply this knowledge to enhance assessment strategy and risk management.
• Drive reuse-first adoption of AI-assisted workflows for control evaluation and reporting automation, ensuring validation against security and compliance expectations.
• Perform hands-on offensive security activities as part of Purple Team engagements in partnership with stakeholders, including the SOC.

Skills

Executive communication

Adversary emulation

Purple Team operations

AI-assisted workflows

Threat intelligence

Cross-functional collaboration

Security controls evaluation

Education

Bachelor’s Degree in Computer Science or related

Tools

AWS

Azure

GCP

Offensive security tools

Job description

J.P. Morgan in Singapore seeks an Assessments & Exercises Vice President to drive advanced cybersecurity assessments and resilience testing.

You will lead offensive security simulations, validate controls, and shape risk-informed security strategy for enterprise-wide protection. The role emphasizes AI-assisted workflow adoption, cross-functional collaboration, and staying ahead of threats through threat intelligence and validated reporting.