Executive Director - Third-Party Risk & Controls Insights

JPMorgan Chase & Co.; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

JPMorgan Chase & Co. in New York is seeking an Executive Director to lead Third-Party Risk and Controls Insights within the Commercial and Investment Bank.

You will synthesize risk signals and translate them into executive-ready narratives to support risk appetite and decision-making. This highly visible role partners with risk, technology, legal, procurement, and compliance to set standards, challenge evidence, and drive remediations across onboarding, monitoring, and exit.

Qualifications

• 8+ years in control management, operational risk, technology risk, cybersecurity risk, or third-party risk within financial services or regulated industries.
• Experience across the third-party lifecycle (onboarding, assessment, monitoring, issue management, exit).
• Ability to synthesize assessment outputs into executive-ready insights and recommendations.

Responsibilities

• Aggregate and analyze third-party risk signals with focus on data protection, cybersecurity, and operational resilience.
• Set and govern standards for risk statements, residual risk framing, materiality thresholds, and escalation expectations.
• Own quality assurance of third-party assessment outputs to ensure complete, consistent, and defensible conclusions.
• Identify and elevate themes across the third-party portfolio via governance forums.
• Produce decision-grade materials that articulate residual risk, mitigations, and decision points.

Skills

Risk management

Executive communication

Cybersecurity risk

Stakeholder management

Vendor risk analysis

Governance

Cloud/SaaS controls

Job description

JPMorgan Chase & Co. in New York is seeking an Executive Director to lead Third-Party Risk and Controls Insights within the Commercial and Investment Bank.

You will synthesize risk signals and translate them into executive-ready narratives to support risk appetite and decision-making. This highly visible role partners with risk, technology, legal, procurement, and compliance to set standards, challenge evidence, and drive remediations across onboarding, monitoring, and exit.