Senior Information Security & Supplier Risk Associate

JPMorgan Chase & Co.; Columbus (OH); On-site; USD 90,000 - 120,000; Full time

Job summary

JPMorgan Chase & Co. is seeking an Information Security and Controls - Senior Associate in the Supplier Issue Management team to strengthen supplier risk governance and control effectiveness.

You will work with diverse stakeholders to review findings and guide remediation with clear action plans and evidence review. You will collaborate across lines of business to reduce risk exposure and ensure compliance with firm policies, while supporting continuous learning in information security

Qualifications

• Experience in information security or cyber risk management with supplier oversight.
• Ability to review documentation and evidence for compliance.
• Strong communication and stakeholder management skills.

Responsibilities

• Review assessment findings for accuracy and compliance with guidance.
• Validate supplier closure evidence including policies and procedures.
• Engage with internal stakeholders to address issue management queries.
• Provide guidance to business partners on resolving findings via action plans.
• Monitor remediation progress for critical and high risk suppliers.
• Coordinate timely remediation of action plans and risk acceptances.
• Manage the full issue lifecycle from identification to closure validation.
• Identify opportunities to improve supplier management processes.
• Share best practices and educate peers accordingly.
• Ensure activities align with organizational standards and policies.
• Communicate effectively with senior management across groups.

Skills

Information security

Risk management

Supplier management

Communication skills

Cross-functional collaboration

Problem solving

Attention to detail

Process improvement

Team oriented

Job description

JPMorgan Chase & Co. is seeking an Information Security and Controls - Senior Associate in the Supplier Issue Management team to strengthen supplier risk governance and control effectiveness.

You will work with diverse stakeholders to review findings and guide remediation with clear action plans and evidence review. You will collaborate across lines of business to reduce risk exposure and ensure compliance with firm policies, while supporting continuous learning in information security