Information Security and Controls - Senior Associate

JPMorganChase; Columbus (OH); On-site; USD 110,000 - 140,000; Full time

Job summary

JPMorganChase seeks an Information Security and Controls - Senior Associate in the Supplier Issue Management team to enhance supplier risk oversight and security standards. You will review assessment findings, validate evidence, and partner with internal teams to reduce risk exposures in third-party relationships.

Work with cross‑line business representatives and critical suppliers to drive remediation, ensure compliance with policies, and communicate progress to senior stakeholders within a

Qualifications

• Experience in information security, risk management, supplier management, IT, or cybersecurity.
• Understanding of supplier IT and operational risk, plus IT control policies.
• Excellent verbal communication skills.
• Experience presenting to senior stakeholders up to MD level.
• Ability to collaborate across multiple business groups.
• Detail oriented in reviewing documentation and evidence.
• Commitment to quality and compliance.
• Ability to manage multiple tasks and priorities.
• Proficiency in process improvement.

Responsibilities

• Review assessment findings for accuracy and compliance with guidance.
• Validate closure evidence provided by suppliers (policies, procedures, documentation).
• Engage with internal stakeholders to address issue management queries.
• Provide leadership to business partners in resolving findings via action plans or risk acceptance.
• Engage with critical/high‑risk suppliers to expedite remediation and show progress to stakeholders.
• Liaise with partners to ensure timely remediation of action plans and risk acceptances.
• Manage the entire issue lifecycle from identification to closure validation.
• Identify opportunities for process improvements within supplier management.
• Support internal education and share best practices with peers.
• Maintain understanding of supplier risk assessment processes and ensure alignment with policies.
• Communicate effectively with senior management across groups.

Skills

Information security

Risk management

Supplier management

Verbal communication

Stakeholder communication

Process improvements

Multi-tasking

Team collaboration

Attention to detail

Problem solving

Job description

Job Description

Join a dynamic team dedicated to enhancing supplier risk management and security standards. Make a meaningful impact by ensuring our partners meet the highest quality and compliance expectations. Collaborate with diverse business groups and help shape best practices in risk management. This is your opportunity to contribute to a global organization and develop your expertise in information security. Be part of a team that values continuous improvement and professional growth.

Job Description

Join a dynamic team dedicated to enhancing supplier risk management and security standards. Make a meaningful impact by ensuring our partners meet the highest quality and compliance expectations. Collaborate with diverse business groups and help shape best practices in risk management. This is your opportunity to contribute to a global organization and develop your expertise in information security. Be part of a team that values continuous improvement and professional growth.

As an Information Security and Controls - Senior Associate, in the Supplier Issue Management team, you help us maintain robust risk management and supplier oversight. You will work closely with internal stakeholders to review and validate supplier assessment findings, ensuring the process meets our organizational standards. You will also work with our most critical suppliers and our cross line of business representatives in reducing risk exposure to the firm through our third party supplier relationships. Together, we foster a culture of quality, collaboration, and continuous learning.

Job Responsibilities

• Review assessment findings for accuracy and compliance with organizational guidance
• Validate closure evidence provided by suppliers, including policies, procedures, and documentation
• Engage with internal stakeholders to address issue management queries
• Provide consultative guidance and leadership to our business partners to help them work with our suppliers in resolving findings through action plans or if necessary understanding the implication of accepting risk
• Engage in ongoing consultation for our critical and high risk suppliers to expedite risk remediation and provide transparency on progress to key business stakeholders
• Liaise with business partners to ensure timely remediation of action plans and risk acceptances
• Manage the entire issue lifecycle, including identification, creation, modification, extension, and closure validation
• Identify opportunities for process improvements within supplier managementSupport internal education and share best practices with peers and colleagues
• Maintain a thorough understanding of the supplier risk assessment process and ensure all activities align with organizational standards and policies
• Communicate effectively with senior management across various business groups

Required Qualifications, Capabilities, And Skills

• Experience in information security, risk management, supplier management, information technology, or cyber security
• Understanding of supplier information technology and operational risk, as well as information technology control policies
• Excellent verbal communication skills
• Experience of delivering written and verbal presentation to senior stakeholders up to managing director level
• Ability to collaborate across multiple business groups
• Attention to detail in reviewing documentation and evidence
• Commitment to maintaining high standards of quality and compliance
• Ability to manage multiple tasks and priorities
• Proficiency in identifying and implementing process improvements
• Strong problem-solving skills
• Ability to work effectively in a team-oriented environment

Preferred Qualifications, Capabilities, And Skills

• Certification in Information Systems Audit or Risk and Information Systems Control
• Experience supporting internal education and best practices sharing
• Familiarity with supplier risk assessment processes
• Experience in validating closure evidence for compliance
• Ability to engage with diverse stakeholders
• Knowledge of global supplier management standards
• Demonstrated commitment to professional development and continuous learning

ABOUT US

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management. We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process. We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

About The Team

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.