VP, Cybersecurity Assessments & Exercises

JPMorgan Chase & Co.; Washington (District of Columbia); On-site; USD 180,000 - 250,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a senior Assessments & Exercises VP in cybersecurity to lead risk-driven testing and resiliency initiatives. You will design simulations, oversee AI-enabled analysis, and drive data-backed recommendations for security posture enhancements.

The role requires deep knowledge of cyber risk, regulatory frameworks, and strong cross-functional collaboration across the firm, with a focus on continuous improvement and incident response readiness.

Qualifications

• Experience leading or designin g assessments and exercises in cybersecurity/resiliency.
• Familiarity with OWASP Top Ten, NIST CSF, and cross-functional risk management.
• Ability to validate AI-assisted findings and ensure data sensitivity compliance.

Responsibilities

• Design and execute testing and simulations including assessments and resiliency exercises.
• Leverage AI capabilities to accelerate evidence synthesis and reporting.
• Promote AI-assisted workflows for control evaluation and automation.
• Evaluate controls for effectiveness and risk impact, including automation opportunities.
• Develop comprehensive assessment reports with findings, risk assessments, and remediations.
• Stay informed on threats using threat intelligence and security research.

Skills

Cybersecurity experience

Risk assessment

NIST CSF knowledge

OWASP Top Ten

AI-aided testing

Education

CISSP / CISM / CBCP / ABCP certification

Tools

OWASP Top Ten

NIST CSF

Job description

JPMorgan Chase & Co. is seeking a senior Assessments & Exercises VP in cybersecurity to lead risk-driven testing and resiliency initiatives. You will design simulations, oversee AI-enabled analysis, and drive data-backed recommendations for security posture enhancements.

The role requires deep knowledge of cyber risk, regulatory frameworks, and strong cross-functional collaboration across the firm, with a focus on continuous improvement and incident response readiness.