Job Description
We are seeking a Cybersecurity Assessor to join our Third-Party Assurance team, responsible for assessing the health and security of J.P. Morgan's Third-Party suppliers.
As a Vice President - Third-Party Cyber Security Architect, you will play a crucial role in identifying risks and gaps in suppliers' control maturity, evaluating their infrastructure, application and control environments, and providing transparency into cyber resilience, recoverability and operational/data risks.
Key responsibilities include:
- Partnering with third-party SME's to conduct detailed evaluations of security controls and practices to identify and articulate risks and gaps in security posture to key stakeholders
- Assessing suppliers' compliance with cybersecurity standards and exposure to industry risks, providing insights into corrective actions and mitigations to strengthen cyber resilience
- Identifying opportunities for process improvement throughout the assessment lifecycle, delivering operational efficiencies and improving supplier assurance
- Providing guidance and advice to Business, Technology and Third-Party supplier groups on cybersecurity best practices
- Supporting the development of supplier risk metrics to articulate the efficacy of suppliers' security arrangements
- Participating in thematic analysis, identifying trends/common issues in supplier security posture
- Partnering with Product Security, Tech Risk & Controls and Risk Pillar leads to raise awareness and drive improvements in Third-Party control implementations
- Developing and delivering education/best practices with peers and colleagues, as well as third parties
- Escalating issues associated with suppliers as needed
Required qualifications, capabilities, and skills include:
- Strong experience in cybersecurity in either control delivery, operations or assessment capabilities
- Deep understanding of key cybersecurity principles and control implementations that mitigate common threat actor techniques
- Understanding of industry risk frameworks (ISO27001, NIST Cybersecurity Framework, etc.)
- Ability to clearly translate and communicate cyber risk via written, verbal and presentation formats to a variety of stakeholders
- Highly analytical, tenacious and inquisitive mindset
- Self-starter with drive to deliver results and continuous improvement mindset
- Process engineering and re-engineering skills
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors.
We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success.
We are an equal opportunity employer and place a high value on diversity and inclusion at our company.