Executive Director, Third-Party Risk & Controls Insights

J.P. Morgan; New York (NY); On-site; USD 180,000 - 280,000; Full time

Job summary

JPMorgan Chase & Co. in New York seeks an Executive Director in Third-Party Risk and Controls Insights to synthesize risk signals across onboarding, change, monitoring, and exit, translating evidence into actionable recommendations.

You will set governance standards, challenge outputs, and partner with risk, technology, legal, procurement, and compliance to drive defendable decisions that protect clients, data, and operations.

Qualifications

• 8+ years of experience in control/operational/technology risk within financial services or regulated industry.
• Experience across the third-party lifecycle (onboarding, assessment, monitoring, exit).
• Proven ability to synthesize assessment outputs into executive-ready insights and recommendations.
• Strong cybersecurity and technology risk fluency; ability to challenge vendor security posture using evidence.

Responsibilities

• Aggregate and analyze third-party risk signals with focus on data protection, cybersecurity, and resilience; translate findings into business impacts.
• Set and govern standards for risk statements, materiality thresholds, issue taxonomy, and escalation across the lifecycle.
• Own QA of third-party assessment and monitoring outputs to ensure defensible conclusions and remediation expectations.
• Identify and elevate themes across the portfolio through governance forums.
• Produce decision-grade materials that articulate residual risk, mitigations, and decision points.
• Review business cases for new or expanded third-party engagements; promote reuse of vendors and standardized controls.
• Interpret vendor security evidence (SOC 2, ISO 27001) into clear risk narratives and control gap assessments.
• Evaluate cloud and SaaS architectures to identify material risks (IAM, encryption, logging, data residency).
• Define and maintain a risk insights framework with KPIs, thresholds, trends, and executive reporting.
• Drive consistency in issue management and transparent reporting of overdue actions and residual risk.
• Partner across control management, technology, procurement, legal, compliance to maintain a single narrative.

Skills

Executive leadership

Third-party risk

Risk governance

Data protection

Cybersecurity risk

Stakeholder management

Communication

Risk storytelling

Tools

SOC 2

ISO 27001

Job description

JPMorgan Chase & Co. in New York seeks an Executive Director in Third-Party Risk and Controls Insights to synthesize risk signals across onboarding, change, monitoring, and exit, translating evidence into actionable recommendations.

You will set governance standards, challenge outputs, and partner with risk, technology, legal, procurement, and compliance to drive defendable decisions that protect clients, data, and operations.