Information Security and Controls - Vice President

Aumni; Ohio; On-site; USD 190,000 - 300,000; Full time

Benefits offered by this job

Health care coverage

On-site wellness centers

Retirement savings plan

Tuition reimbursement

Job summary

JPMorgan Chase is seeking an Information Security and Controls - Vice President to lead supplier risk assessment review and closure validation for critical third-party relationships. You will partner with internal stakeholders, cross-business teams, and suppliers to reduce risk exposure while ensuring compliance with organizational standards.

You will drive governance, provide guidance to business partners, and oversee the full issue lifecycle with a focus on remediation, evidence validation,

Qualifications

• Minimum 8 years experience in information security, risk management, supplier management, IT, or cyber security.
• Understanding of supplier IT and operational risk and IT control policies.
• Excellent verbal communication and ability to present to senior stakeholders.

Responsibilities

• Review assessment findings for accuracy and compliance with guidance.
• Validate closure evidence provided by suppliers (policies, procedures, documentation).
• Engage with internal stakeholders to address issue management queries.

Skills

Information security

Risk management

Supplier management

Information technology

Cyber security

Stakeholder communication

Process improvement

Team collaboration

Policy compliance

Job description

As an Information Security and Controls - Vice President, in the Supplier Issue Management team, you help us maintain robust risk management and supplier oversight. You will work closely with internal stakeholders to review and validate supplier assessment findings, ensuring the process meets our organizational standards. You will also work with our most critical suppliers and our cross line of business representatives in reducing risk exposure to the firm through our third party supplier relationships. Together, we foster a culture of quality, collaboration, and continuous learning.

Job Responsibilities

• Review assessment findings for accuracy and compliance with organizational guidance
• Validate closure evidence provided by suppliers, including policies, procedures, and documentation
• Engage with internal stakeholders to address issue management queries
• Provide consultative guidance and leadership to our business partners to help them work with our suppliers in resolving findings through action plans or if necessary understanding the implication of accepting risk
• Engage in ongoing consultation for our critical and high risk suppliers, to expedite risk remediation and provide transparency on progress to key business stakeholders
• Liaise with business partners to ensure timely remediation of action plans and risk acceptances
• Manage the entire issue lifecycle, including identification, creation, modification, extension, and closure validation
• Identify opportunities for process improvements within supplier management
• Support internal education and share best practices with peers and colleagues
• Maintain a thorough understanding of the supplier risk assessment process and ensure all activities align with organizational standards and policies
• Communicate effectively with senior management across various business groups

Required Qualifications, Capabilities, and Skills

• Minimum 8 years experience in information security, risk management, supplier management, information technology, or cyber security
• Understanding of supplier information technology and operational risk, as well as information technology control policies
• Excellent verbal communication skills
• Experience of delivering written and verbal presentation to senior stakeholders up to managing director level
• Ability to collaborate across multiple business groups
• Attention to detail in reviewing documentation and evidence
• Commitment to maintaining high standards of quality and compliance
• Ability to manage multiple tasks and priorities
• Proficiency in identifying and implementing process improvements
• Strong problem-solving skills
• Ability to work effectively in a team-oriented environment

Preferred qualifications, capabilities, and skills

• Certification in Information Systems Audit or Risk and Information Systems Control
• Experience supporting internal education and best practices sharing
• Familiarity with supplier risk assessment processes
• Experience in validating closure evidence for compliance
• Ability to engage with diverse stakeholders
• Knowledge of global supplier management standards
• Demonstrated commitment to professional development and continuous learning

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success.

We are an equal opportunity employer and place a high value on diversity and inclusion at our company.

We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law.

We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs.

Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.

Global Supplier Services (GSS) manages the source-to-pay cycle, engaging with suppliers, negotiating contracts, conducting risk assessments and evaluating the customer experience. Global teams support sourcing, third party oversight, procurement and payment operations, supplier relationship management and customer experience.

Join a dynamic team dedicated to enhancing supplier risk management and security standards.