Information Security and Controls - Vice President

JPMorgan Chase; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

JPMorgan Chase is seeking an experienced information security and supplier risk professional to enhance risk management across our supplier ecosystem. You will review findings, validate evidence, and guide internal stakeholders through remediation and risk acceptance decisions.

Collaborating with diverse business groups, you will shape best practices, ensure policy alignment, and drive continuous improvement in our supplier risk processes while communicating progress to senior leadership.

Qualifications

• Minimum 8 years experience in information security, risk management, supplier management, information technology, or cyber security.
• Understanding of supplier information technology and operational risk, as well as information technology control policies.
• Excellent verbal communication skills.
• Experience delivering written and verbal presentations to senior stakeholders up to managing director level.
• Ability to collaborate across multiple business groups.
• Attention to detail in reviewing documentation and evidence.
• Commitment to maintaining high standards of quality and compliance.
• Ability to manage multiple tasks and priorities.

Responsibilities

• Review assessment findings for accuracy and compliance with organizational guidance.
• Validate closure evidence provided by suppliers, including policies, procedures, and documentation.
• Engage with internal stakeholders to address issue management queries.
• Provide consultative guidance and leadership to our business partners to help them work with our suppliers in resolving findings through action plans or if necessary understanding the implication of accepting risk.
• Engage in ongoing consultation for our critical and high risk suppliers, to expedite risk remediation and provide transparency on progress to key business stakeholders.
• Liaise with business partners to ensure timely remediation of action plans and risk acceptances.
• Manage the entire issue lifecycle, including identification, creation, modification, extension, and closure validation.
• Identify opportunities for process improvements within supplier management.
• Support internal education and share best practices with peers and colleagues.
• Maintain a thorough understanding of the supplier risk assessment process and ensure all activities align with organizational standards and policies.
• Communicate effectively with senior management across various business groups.

Skills

Information security

Risk management

Supplier management

Verbal communication

Presentation to senior stakeholders

Team collaboration

Problem solving

Job description

Join a dynamic team dedicated to enhancing supplier risk management and security standards. Make a meaningful impact by ensuring our partners meet the highest quality and compliance expectations. Collaborate with diverse business groups and help shape best practices in risk management. This is your opportunity to contribute to a global organization and develop your expertise in information security. Be part of a team that values continuous improvement and professional growth.

Job Responsibilities

• Review assessment findings for accuracy and compliance with organizational guidance
• Validate closure evidence provided by suppliers, including policies, procedures, and documentation
• Engage with internal stakeholders to address issue management queries
• Provide consultative guidance and leadership to our business partners to help them work with our suppliers in resolving findings through action plans or if necessary understanding the implication of accepting risk
• Engage in ongoing consultation for our critical and high risk suppliers, to expedite risk remediation and provide transparency on progress to key business stakeholders
• Liaise with business partners to ensure timely remediation of action plans and risk acceptances
• Manage the entire issue lifecycle, including identification, creation, modification, extension, and closure validation
• Identify opportunities for process improvements within supplier management
• Support internal education and share best practices with peers and colleagues
• Maintain a thorough understanding of the supplier risk assessment process and ensure all activities align with organizational standards and policies
• Communicate effectively with senior management across various business groups

Required Qualifications, Capabilities, and Skills

• Minimum 8 years experience in information security, risk management, supplier management, information technology, or cyber security
• Understanding of supplier information technology and operational risk, as well as information technology control policies
• Excellent verbal communication skills
• Experience of delivering written and verbal presentation to senior stakeholders up to managing director level
• Ability to collaborate across multiple business groups
• Attention to detail in reviewing documentation and evidence
• Commitment to maintaining high standards of quality and compliance
• Ability to manage multiple tasks and priorities
• Proficiency in identifying and implementing process improvements
• Strong problem-solving skills
• Ability to work effectively in a team-oriented environment

Preferred qualifications, capabilities, and skills

• Certification in Information Systems Audit or Risk and Information Systems Control
• Experience supporting internal education and best practices sharing
• Familiarity with supplier risk assessment processes
• Experience in validating closure evidence for compliance
• Ability to engage with diverse stakeholders
• Knowledge of global supplier management standards
• Demonstrated commitment to professional development and continuous learning