Executive Director, Third-Party Risk & Controls Insights

Fairygodboss; New York (NY); On-site; USD 180,000 - 280,000; Full time

Job summary

JPMorganChase seeks an Executive Director in Third-Party Risk and Controls Insights to synthesize risk findings across onboarding, monitoring, and exit. You will translate security evidence into actionable narratives and recommendations for senior leaders, shaping remediation prioritization and risk acceptance decisions.

You will partner with risk, technology, legal, procurement, and compliance to maintain consistent risk articulation and decision-useful reporting across the vendor lifecycle.

Qualifications

• 8 years of experience in control management, operational risk, technology risk, cybersecurity risk, or third-party risk within financial services or a similarly regulated industry.
• Demonstrated ability to synthesize assessment outputs into executive-ready insights, including themes, emerging risks, residual risk framing, and clear recommendations.
• Strong cybersecurity and technology risk fluency, including the ability to challenge vendor security posture using evidence such as SOC 2 and ISO 27001.

Responsibilities

• Aggregate and analyze third-party risk signals with a focus on data protection, cybersecurity, and operational resilience, translating findings into business process impacts and operational risk outcomes.
• Set and govern standards for risk statements, residual risk framing, materiality thresholds, issue taxonomy, and escalation expectations across the third-party lifecycle.
• Own quality assurance and constructive challenge of third-party assessment and monitoring outputs to ensure completeness, consistency, and defensibility of conclusions and remediation expectations.
• Identify and elevate themes across the third-party portfolio through appropriate governance forums.
• Produce decision-grade materials that clearly articulate residual risk, recommended mitigations, and defined decision points tailored to business criticality.
• Review and advise on business cases for new or expanded third-party engagements, including opportunities to reuse existing vendors and standardize controls or contractual levers.
• Interpret vendor security evidence (SOC 2, ISO 27001, SIG, CAIQ) and convert it into clear risk narratives and control gap assessments.

Skills

Executive leadership

Synthesize risk outputs

Stakeholder management

Clear communication

Regulatory risk

Vendor risk

Risk governance

Cloud/SaaS risk knowledge

Data protection & cybersecurity

Education

Bachelor's degree in a relevant field

Tools

SOC 2

ISO 27001

CAIQ

SIG

Job description

JPMorganChase seeks an Executive Director in Third-Party Risk and Controls Insights to synthesize risk findings across onboarding, monitoring, and exit. You will translate security evidence into actionable narratives and recommendations for senior leaders, shaping remediation prioritization and risk acceptance decisions.

You will partner with risk, technology, legal, procurement, and compliance to maintain consistent risk articulation and decision-useful reporting across the vendor lifecycle.