Controls Intelligence Lead -Vice President

JPMorgan Chase & Co.; Plano (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Controls Intelligence Lead within Third Party Continuous Monitoring (TPCM) to develop and lead cyber risk intelligence across the supply chain for internal and external stakeholders.

The role partners with governance, risk and controls, and product teams to operationalize CTPO’s TPCM initiative focused on cyber risk, with regular leadership updates. The position emphasizes building strategic cyber intelligence capabilities, managing operational IT/cyber risks,

Qualifications

• Minimum of 5 years in a cybersecurity analysis role, with finance experience.

Responsibilities

• Coordinate with business units to meet evolving cybersecurity and business needs.
• Develop and enhance cyber intelligence capabilities for detailed supply chain visibility.
• Lead implementation of the program and improve cyber intelligence processes.

Skills

Cybersecurity analysis

Threat intelligence

Threat hunting

Malware analysis

Digital forensics

Incident response

Risk management

Compliance practices

NIST

ISO 27001

Regulatory knowledge

Executive relationship

Project management

multitasking

Professionalism

Job description

Job Description
JPMorgan Chase’s (JPMC) Corporate Third-Party Oversight (CTPO) Program, part of Global Supplier Services, is responsible for developing, implementing, and overseeing the framework that ensures effective use of suppliers to achieve strategic goals. The CTPO Program covers oversight of both external third-party suppliers (TPO) and internal intra-affiliate (IAO) services, and includes Supplier Controls Intelligence (SCI) and Third Party Risk Management (TPRM). The program also builds awareness across the firm, ensures global consistency across all Lines of Business (LOBs) and Corporate Functions (CFs), and manages outsourcing regulatory requirements, including periodic updates to regulators.

As a Controls Intelligence Lead within Third Party Continuous Monitoring (TPCM), you will be responsible for developing, maintaining, and leading the integration of supply chain cyber risk and intelligence sources to maximize visibility of cybersecurity threats and vulnerabilities across the supply chain for both internal and external stakeholders. You will collaborate with governance, risk and controls, and product teams to develop an effective cyber threat intelligence and supply chain risk management platform. This role is central to the development and operationalization of CTPO’s new Third Party Continuous Monitoring (TPCM) initiative, with a focus on cyber risk, including documentation and regular updates to CTPO leadership.

Job Responsibilities:

• Coordinate with business units and leaders to ensure the Third Party Cyber Intelligence capability meets evolving cybersecurity and business needs.
• Develop and enhance strategic, operational, and tactical cyber intelligence capabilities to provide detailed visibility into supply chain cyber risks and enable effective risk mitigation.
• Lead implementation of the program, own and enhance cyber intelligence processes, and partner with teams to improve decision‑making based on curated cyber threat intelligence.
• Support the execution of the continuous monitoring risk and control program to mitigate cybersecurity risks (e.g., operational, IT controls, cyber threats, data breaches).
• Assist in identifying, evaluating, and managing operational and IT‑related cyber risks in line with regulations, cybersecurity standards, and the JPMC enterprise framework.
• Develop and maintain reports on cyber risk events, incidents, and their impact on the firm’s control environment.
• Respond to ad‑hoc supplier cyber risk queries from stakeholders.

Required qualifications, skills, and capabilities:

• Minimum of 5 years experience in a cybersecurity analysis role, such as cyber threat intelligence, threat hunting, malware analysis, digital forensics, or incident response; financial services experience.
• Strong knowledge of cybersecurity controls, risk management, compliance practices, cybersecurity standards (e.g., NIST, ISO 27001), and financial services regulations.
• Ability to understand complex technical systems and related business processes, assess associated cyber risks and controls, and recommend improvements as needed.
• Proven ability to build relationships with senior business executives and partner across organizational lines to mitigate cyber risks.
• Highly disciplined, able to work independently and make sound decisions with limited supervision.
• Strong organizational, project management, and multitasking skills, with a demonstrated ability to manage expectations and deliver results.
• High level of professionalism, self‑motivation, and a strong sense of urgency.