Enterprise Vulnerability Management Governance Lead

JPMorgan Chase & Co.; Jersey City (NJ); On-site; USD 150,000 - 210,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Tech Risk and Controls Lead to govern enterprise Vulnerability Management. You will coordinate across Product, Engineering, Operations, Risk Intelligence, and Compliance to ensure clear decision rights and timely evidence-based outcomes.

The role blends cybersecurity risk with enterprise leadership to strengthen discovery, coverage, and remediation governance across cloud, data centers, endpoints, and applications, driving continuous improvement.

Qualifications

• 10+ years in cybersecurity or technology risk with governance leadership.
• Experience leading enterprise Vulnerability Management governance and cross-functional oversight.
• Deep understanding of the Vulnerability Management lifecycle and remediation processes.
• Proven ability to define decision rights, governance forums, RACI models, and outcome-based metrics.
• Experience governing complex ecosystems across multiple tools, platforms, and hybrid environments.
• Strong analytical skills in discovery, root-cause analysis, and risk reporting.
• Executive presence to challenge, influence, and communicate with senior stakeholders.
• Experience supporting Audit, Compliance, Operational Risk, and regulatory engagements with evidence-based documentation.
• Knowledge of governance, risk, and compliance platforms and automation-enabled monitoring.
• Experience using enterprise AI capabilities to support cybersecurity workflows.

Responsibilities

• Lead the enterprise Vulnerability Management governance function and central coordination.
• Establish and maintain governance charter, operating model, decision rights, forums, and escalation pathways.
• Coordinate across product, engineering, operations, risk intel, standards, control design, and business teams while preserving ownership.
• Chair or coordinate governance forums with complete evidence and timely, traceable decisions.
• Govern changes to discovery, coverage, feeds, integrations, and scoring through impact assessment and validation.
• Drive systemic root-cause analysis and translate insights into enterprise corrective actions and ownership.
• Define and oversee enterprise metrics and reporting on discovery, coverage, control outcomes, and governance health.
• Coordinate responses to systemic issues with appropriate control and business owners.
• Collaborate with product owners on strategy, roadmap, and risk-informed prioritization.
• Coordinate with Audit, Compliance, Operational Risk, and regulatory teams for coherent explanations of scope and decisions.
• Promote automation and auditable workflows to improve governance quality and timeliness.

Skills

Cybersecurity risk

Governance leadership

Cross-functional collaboration

Audit readiness

Metrics & reporting

Tools

GRC platforms

Vulnerability Management tools

AI governance tools

Job description

JPMorgan Chase & Co. is seeking a Tech Risk and Controls Lead to govern enterprise Vulnerability Management. You will coordinate across Product, Engineering, Operations, Risk Intelligence, and Compliance to ensure clear decision rights and timely evidence-based outcomes.

The role blends cybersecurity risk with enterprise leadership to strengthen discovery, coverage, and remediation governance across cloud, data centers, endpoints, and applications, driving continuous improvement.