Vice President - Impact Assessments

Testing Site - JPMC; Jersey City (NJ); Presencial; USD 180.000 - 240.000; Tempo integral

Resumo da vaga

Testing Site - JPMC is seeking an Assessments & Exercises Vice President in Cybersecurity Technology & Controls to lead risk-driven assessments, design simulations, and advise on risk management. You will guide cross-functional teams on security strategy, controls testing, and remediation initiatives.

You will develop comprehensive assessment reports, monitor regulatory compliance, and drive continuous improvement across people, processes, and technology.

Qualificações

• 5+ years of experience in technology risk management, information security, or a related field; hands-on in controls testing and remediation.
• Excellent communication and report-writing; able to influence stakeholders across functions.

Responsabilidades

• Evaluate controls for effectiveness and impact on operational risk; identify opportunities to automate control evaluation.
• Develop assessment reports with findings, risk assessments, and remediation recommendations to enable data-driven decisions.
• Assess impact of technology control observations on internal controls over financial reporting; ensure timely escalation.
• Monitor technology risks to ensure adherence to standards and regulatory requirements.
• Develop and execute risk mitigation strategies; ensure controls are addressed through processes and controls design.
• Partner with internal control, internal audit, and external audit teams to support technology controls testing and SOX/SOC reporting.
• Contribute to initiatives to strengthen technology risk management within business processes and SOX/SOC programs; ensure governance and policy alignment.
• Leverage AI and monitoring tools to identify, analyze, and mitigate risks by interpreting process data insights and metrics.
• Lead and execute technology risk assessment activities; conduct reviews, walkthroughs, and oversight of control operating effectiveness.
• Develop materials and communicate impact assessment findings, recommendations, and status updates to senior leadership and stakeholders.
• Collaborate with cross-functional teams to design, implement, and evaluate technology controls with positive business impact.

Conhecimentos

Technology risk

Controls testing

Risk assessment

Regulatory compliance

Audit liaison

Communication

Ferramentas

Cloud platforms

Descrição da vaga

Contribute to leading-edge security and resilience efforts, advancing protective strategies and propelling continuous improvement.

As an Assessments & Exercises Vice President in Cybersecurity Technology & Controls, you will contribute significantly to enhancing the firm's cybersecurity or resiliency posture by using industry-standard assessment methodologies and techniques to proactively identify risks and vulnerabilities in people, processes, and technology. Design and deploy risk-driven tests and simulations (or manage a highly-skilled team that does) and inform analysis to clearly outline root-causes. In this role, you will evaluate preventative controls, incident response processes, and detection capabilities, and advise cross-functional teams on security strategy and risk management.

Job responsibilities

• Evaluate controls for effectiveness and impact on operational risk, as well as opportunities to automate control evaluation
• Collaborate closely with cross-functional teams to develop comprehensive assessment reports – including detailed findings, risk assessments, and remediation recommendations – making data-driven decisions that encourage continuous improvement
• Assess the impact of identified technology control observations on internal controls over financial reporting, ensuring timely escalation.
• Continuously monitor technology risks to ensure adherence to firm standards, regulatory requirements, and industry-leading practices.
• Develop and execute risk mitigation strategies, ensuring technology control observations are addressed through the design and implementation of effective processes and controls.
• Partner with internal control functions, internal audit, and external audit teams to support technology controls testing, as well as quarterly and annual SOX and SOC reporting programs.
• Contribute to initiatives that strengthen the management of technology risks within business processes and SOX/SOC programs by conducting ongoing process and control assessments, ensuring governance adherence, and alignment with firm standards and policies.
• Leverage artificial intelligence and monitoring tools to proactively identify, analyze, and mitigate risks by interpreting process data insights and metrics for control effectiveness.
• Lead and execute assigned technology risk assessment activities, including annual, quarterly, and ongoing reviews, walkthroughs, and oversight of control operating effectiveness.
• Develop materials and communicate impact assessment findings, recommendations, and status updates to senior leadership, business process owners, and relevant stakeholders.
• Collaborate with cross-functional teams across business and technology to design, implement, and evaluate effective technology controls, ensuring their positive impact on business processes.

Required qualifications, capabilities, and skills

• Obtain 5+ years of experience in technology risk management, information security, or a related field, with hands-on expertise in controls testing, observation assessment, and remediation.
• Excellent communication, collaboration, and report writing skills, with the ability to influence and engage stakeholders across various functions and levels
• Demonstrated ability to evaluate technology risks and control observations, with a solid understanding of industry standards and leading practices.
• Strong analytical and problem-solving skills, with a track record of resolving risk issues and supporting remediation strategies.
• Familiarity with risk management frameworks, regulatory requirements, and compliance standards such as SOX, SOC 1, SOC 2, COSO, NIST, COBIT, and SEC guidance for internal controls over financial reporting.
• Proven ability to leverage IT expertise to support compliance initiatives and enhance control environments.

Preferred qualifications, capabilities, and skills

• Hold relevant industry certifications – such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or other recognized credentials in risk management or information security.
• Knowledge/experience in modern programming language
• Experience with cloud platforms, including Azure, AWS, or Google Cloud.
• Excellent communication and presentation skills, with the ability to influence stakeholders at all levels and effectively convey risk-related findings to both technical and non-technical audiences.
• Strong interpersonal skills and a collaborative approach to working with cross-functional and geographically dispersed teams.
• Commitment to ongoing professional development and staying current with industry trends.