Senior Third-Party Cyber Risk Lead – Strategy & Assurance

JPMorgan Chase; Plano (TX); On-site; USD 124,000 - 175,000; Full time

Job summary

JPMorganChase is seeking a Tech Risk - Third Party Lead in Plano, TX, to oversee third-party risk assessment and assurance programs across cyber and data controls. You will partner with Control Owners and multiple teams to define strategy, govern risk, and drive measurable improvements.

The role emphasizes executive-ready reporting, risk insights, and strong stakeholder engagement to strengthen end-to-end third‑party risk management practices in a fast‑paced environment.

Qualifications

• 5+ years in third-party risk management or related fields (information security, risk management).
• Experience in highly regulated industries (financial services preferred).
• Proven ability to lead cross-functional teams and influence senior stakeholders.
• Knowledge of OCC, FFIEC, GDPR, ISO 27001, NIST and GRC/datapoint platforms.

Responsibilities

• Strengthen third-party risk assessment and control environment; advise on control implementation.
• Oversee third-party assurance programs; align with risk appetite and regulatory changes.
• Deliver reports/metrics to show risk trends and program effectiveness.
• Collaborate with control owners to set clear cyber/tech/data control requirements.
• Liaise with Global Supplier Services, Tech Risk, Product Security, and GRC leads.
• Leverage AI capabilities for risk summaries while ensuring data sensitivity and accuracy.
• Promote AI-assisted, reusable control testing and action-plans with human review.
• Stay updated on industry trends and emerging threats.

Skills

Third-party risk management

Cybersecurity

Regulatory requirements

GRC platforms

Data analytics

Executive reporting

Stakeholder management

Education

Bachelor’s degree in Information Security/Cybersecurity/Risk Management

Tools

Archer

ServiceNow

Alteryx

Tableau

QlikView

Job description

JPMorganChase is seeking a Tech Risk - Third Party Lead in Plano, TX, to oversee third-party risk assessment and assurance programs across cyber and data controls. You will partner with Control Owners and multiple teams to define strategy, govern risk, and drive measurable improvements.

The role emphasizes executive-ready reporting, risk insights, and strong stakeholder engagement to strengthen end-to-end third‑party risk management practices in a fast‑paced environment.