Supplier Cybersecurity Assessor - Vice President

JPMorgan Chase & Co.; Columbus (OH); On-site; USD 180,000 - 250,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Vice President to join the Global Supplier Services SAS team to conduct technology and cybersecurity control assessments of supplier environments, including public cloud.

You will partner with stakeholders to ensure the confidentiality, integrity, and availability of JPMorgan Chase’s data and services, helping drive improvements in supplier risk posture and supporting the firm’s defensive strategy.

Qualifications

• 10+ years of experience in Technology Risk & Controls, Cyber Operations, Cloud Security, or related fields within a large enterprise.
• Subject matter expertise in cybersecurity operations and defensive architectures.
• Proficiency in incident management, investigations, and root cause analysis.

Responsibilities

• Review supplier security stacks and conduct fieldwork with internal and external stakeholders to ensure alignment with JPMorganChase expectations.
• Provide cybersecurity risk and controls expertise during onsite and virtual assessments of supplier control environments.
• Identify cybersecurity risks and weaknesses within supplier IT and hosted cloud environments, and document remediation plans.
• Stay informed of the latest cyber risks and adversarial tactics to maximize assessment effectiveness.
• Identify and recommend process improvements to enhance operational efficiency and supplier risk posture, including expanded monitoring and key risk indicator tracking.

Skills

Technology Risk & Controls

Cybersecurity Operations

Cloud Security

Incident Management

Stakeholder Communication

Job description

Are you ready to make a significant impact on the security of JPMorgan Chase’s global supply chain? As a member of our Supplier Assurance Services (SAS) team, you will help safeguard our firm by evaluating and strengthening supplier cybersecurity controls. This is your opportunity to grow your career while protecting one of the world’s leading financial institutions.

As a Supplier Cybersecurity Assessor - Vice President in Global Supplier Services, you will conduct comprehensive technology and cybersecurity control assessments of supplier environments, including services hosted in public cloud providers. You will partner with stakeholders to ensure the confidentiality, integrity, and availability of JPMorgan Chase’s data and services. Your expertise will help drive improvements in our supplier risk posture and support the firm’s overall defensive strategy.

Job responsibilities

• Review supplier security stacks and conduct fieldwork with internal and external stakeholders to ensure alignment with JPMorganChase expectations.
• Provide cybersecurity risk and controls expertise during onsite and virtual assessments of supplier control environments.
• Identify cybersecurity risks and weaknesses within supplier IT and hosted cloud environments, and document remediation plans.
• Stay informed of the latest cyber risks and adversarial tactics to maximize assessment effectiveness.
• Identify and recommend process improvements to enhance operational efficiency and supplier risk posture, including expanded monitoring and key risk indicator tracking.

Required qualifications, capabilities, and skills

• 10 years of experience in Technology, Technology Risk & Controls, Cyber Operations, Application Security, Cloud Security (SaaS, PaaS, IaaS), Network Security, or Cyber Resiliency within a large enterprise environment.
• Subject matter expertise in cybersecurity operations, including defensive architectures and processes to address adversarial activities.
• Proficiency in incident management, incident handling, investigations, and root cause analysis.
• Strong written and verbal communication skills, with the ability to present complex cyber risks to senior management and business stakeholders.
• Experience engaging with senior decision makers and constructively challenging when necessary.

Preferred qualifications, capabilities, and skills

• Practical experience in red teaming, blue teaming, or penetration testing.
• CISSP, CCSP, or similar cybersecurity certifications.