Information Security and Controls - Senior Associate

Aumni; Ohio; On-site; USD 90,000 - 140,000; Full time

Job summary

JPMorgan Chase & Co. in the United States seeks an Information Security and Controls - Senior Associate to strengthen supplier risk management and security standards. You will review findings, validate closure evidence, and lead risk remediation with critical suppliers.

You will collaborate with internal stakeholders, provide guidance to business partners, and ensure adherence to organizational policies while supporting continuous learning and process improvements.

Qualifications

• Experience in information security, risk management, supplier management, information technology, or cyber security.
• Understanding of supplier information technology and operational risk, as well as information technology control policies.
• Excellent verbal communication skills.
• Experience delivering presentations to senior stakeholders up to managing director level.
• Ability to collaborate across multiple business groups.
• Attention to detail in reviewing documentation and evidence.
• Commitment to maintaining high standards of quality and compliance.
• Ability to manage multiple tasks and priorities.
• Proficiency in identifying and implementing process improvements.
• Strong problem-solving skills.
• Ability to work effectively in a team-oriented environment.

Responsibilities

• Review assessment findings for accuracy and compliance with organizational guidance.
• Validate closure evidence provided by suppliers, including policies, procedures, and documentation.
• Engage with internal stakeholders to address issue management queries.
• Provide consultative guidance and leadership to our business partners to help them work with our suppliers in resolving findings through action plans or understanding the implication of accepting risk.
• Engage in ongoing consultation for our critical and high risk suppliers to expedite risk remediation and provide transparency on progress to key business stakeholders.
• Liaise with business partners to ensure timely remediation of action plans and risk acceptances.
• Manage the entire issue lifecycle, including identification, creation, modification, extension, and closure validation.
• Identify opportunities for process improvements within supplier management.
• Support internal education and share best practices with peers and colleagues.
• Maintain a thorough understanding of the supplier risk assessment process and ensure all activities align with organizational standards and policies.
• Communicate effectively with senior management across various business groups.

Skills

Information security

Risk management

Supplier management

Information technology

Cyber security

Communication

Documentation review

Process improvement

Team collaboration

Problem-solving

Multitasking

Tools

Policies and procedures

Documentation evidence review

Job description

Join a dynamic team dedicated to enhancing supplier risk management and security standards. Make a meaningful impact by ensuring our partners meet the highest quality and compliance expectations. Collaborate with diverse business groups and help shape best practices in risk management. This is your opportunity to contribute to a global organization and develop your expertise in information security. Be part of a team that values continuous improvement and professional growth.

As an Information Security and Controls - Senior Associate, in the Supplier Issue Management team, you help us maintain robust risk management and supplier oversight. You will work closely with internal stakeholders to review and validate supplier assessment findings, ensuring the process meets our organizational standards. You will also work with our most critical suppliers and our cross line of business representatives in reducing risk exposure to the firm through our third party supplier relationships. Together, we foster a culture of quality, collaboration, and continuous learning.

Job Responsibilities

• Review assessment findings for accuracy and compliance with organizational guidance
• Validate closure evidence provided by suppliers, including policies, procedures, and documentation
• Engage with internal stakeholders to address issue management queries
• Provide consultative guidance and leadership to our business partners to help them work with our suppliers in resolving findings through action plans or if necessary understanding the implication of accepting risk
• Engage in ongoing consultation for our critical and high risk suppliers to expedite risk remediation and provide transparency on progress to key business stakeholders
• Liaise with business partners to ensure timely remediation of action plans and risk acceptances
• Manage the entire issue lifecycle, including identification, creation, modification, extension, and closure validation
• Identify opportunities for process improvements within supplier management
• Support internal education and share best practices with peers and colleagues
• Maintain a thorough understanding of the supplier risk assessment process and ensure all activities align with organizational standards and policies
• Communicate effectively with senior management across various business groups

Required Qualifications, Capabilities, and Skills

• Experience in information security, risk management, supplier management, information technology, or cyber security
• Understanding of supplier information technology and operational risk, as well as information technology control policies
• Excellent verbal communication skills
• Experience of delivering written and verbal presentation to senior stakeholders up to managing director level
• Ability to collaborate across multiple business groups
• Attention to detail in reviewing documentation and evidence
• Commitment to maintaining high standards of quality and compliance
• Ability to manage multiple tasks and priorities
• Proficiency in identifying and implementing process improvements
• Strong problem-solving skills
• Ability to work effectively in a team-oriented environment

Preferred qualifications, capabilities, and skills

• Certification in Information Systems Audit or Risk and Information Systems Control
• Experience supporting internal education and best practices sharing
• Familiarity with supplier risk assessment processes
• Experience in validating closure evidence for compliance
• Ability to engage with diverse stakeholders
• Knowledge of global supplier management standards
• Demonstrated commitment to professional development and continuous learning

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

• We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success. Join a dynamic team dedicated to enhancing supplier risk management and security standards.