Executive Director, Third-Party Risk & Controls Insights

JPMorgan Chase & Co.; City of Rochester (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

JPMorgan Chase & Co. in New York seeks an Executive Director for Third-Party Risk and Controls Insights to synthesize risk signals across onboarding, monitoring, and exit. You will translate vendor security evidence into clear narratives and actionable recommendations for leadership.

In this high-visibility role, you will govern risk statements, escalate issues, and shape decision-ready materials that align with risk appetite and standards across technology, legal, and procurement partners.

Qualifications

• 8 years of experience in control management, operational risk, technology risk, cybersecurity risk, or third-party risk in regulated environments.
• Ability to synthesize assessment outputs into executive-ready insights and actionable recommendations.
• Strong fluency in cybersecurity and technology risk; able to challenge vendor security posture with evidence.
• Knowledge of cloud and SaaS control domains (IAM, encryption, logging, DR, etc.).

Responsibilities

• Aggregate and analyze third-party risk signals focusing on data protection, cybersecurity, and operations risk.
• Set and govern standards for risk statements, materiality, issue taxonomy, and escalation across the lifecycle.
• Own QA and challenge of assessment outputs to ensure defensible conclusions and remediation expectations.
• Identify themes across portfolios (gap patterns, concentration risks) for governance forums.
• Produce decision-grade materials with residual risk and mitigations tailored to business criticality.
• Review business cases for new/expanded vendor engagements and standardize controls.
• Interpret vendor security evidence (SOC 2, ISO 27001, SIG, CAIQ) into risk narratives.
• Evaluate cloud/SaaS architectures to identify material risks like IAM, encryption, logging, and data residency.

Skills

Synthesize outputs

Executive-ready insights

Vendor security posture

Cloud/SaaS controls

Stakeholder management

Executive communication

Job description

JPMorgan Chase & Co. in New York seeks an Executive Director for Third-Party Risk and Controls Insights to synthesize risk signals across onboarding, monitoring, and exit. You will translate vendor security evidence into clear narratives and actionable recommendations for leadership.

In this high-visibility role, you will govern risk statements, escalate issues, and shape decision-ready materials that align with risk appetite and standards across technology, legal, and procurement partners.