Are you ready to make a significant impact on the security of JPMorgan Chase’s global supply chain? As a member of our Supplier Assurance Services (SAS) team, you will help safeguard our firm by evaluating and strengthening supplier cybersecurity controls. This is your opportunity to grow your career while protecting one of the world’s leading financial institutions.
As a Supplier Cybersecurity Assessor - Vice President in Global Supplier Services, you will conduct comprehensive technology and cybersecurity control assessments of supplier environments, including services hosted in public cloud providers. You will partner with stakeholders to ensure the confidentiality, integrity, and availability of JPMorgan Chase’s data and services. Your expertise will help drive improvements in our supplier risk posture and support the firm’s overall defensive strategy.
Job responsibilities
- Review supplier security stacks and conduct fieldwork with internal and external stakeholders to ensure alignment with JPMorganChase expectations.
- Provide cybersecurity risk and controls expertise during onsite and virtual assessments of supplier control environments.
- Identify cybersecurity risks and weaknesses within supplier IT and hosted cloud environments, and document remediation plans.
- Stay informed of the latest cyber risks and adversarial tactics to maximize assessment effectiveness.
- Identify and recommend process improvements to enhance operational efficiency and supplier risk posture, including expanded monitoring and key risk indicator tracking.
Required qualifications, capabilities, and skills
- 10 years of experience in Technology, Technology Risk & Controls, Cyber Operations, Application Security, Cloud Security (SaaS, PaaS, IaaS), Network Security, or Cyber Resiliency within a large enterprise environment.
- Subject matter expertise in cybersecurity operations, including defensive architectures and processes to address adversarial activities.
- Proficiency in incident management, incident handling, investigations, and root cause analysis.
- Strong written and verbal communication skills, with the ability to present complex cyber risks to senior management and business stakeholders.
- Experience engaging with senior decision makers and constructively challenging when necessary.
Preferred qualifications, capabilities, and skills
- Practical experience in red teaming, blue teaming, or penetration testing.
- CISSP, CCSP, or similar cybersecurity certifications.
About Us
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans
Similar Jobs
What you need to know about the Colorado Tech Scene
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
