Associate, Supplier Cybersecurity Controls Assessor

You will be a Supplier Control Assessor in the Supplier Assurance Services (SAS) team at JPMC. Your main responsibility will be to perform virtual technical risk and control assessments of medium and low-risk supplier environments to ensure compliance with JPMC Corporate Policies & Standards and validate that technical risks are managed and security controls are implemented. You will be part of the Supplier Control Assessment (SCA) team and collaborate with CTC and Lines of Business (LOBs) to assess supplier's control environments.

- Engage with multiple LOB Delivery Managers to ensure compliance with required assessments per JPMC policy and procedures. - Drive all aspects of the control assessment of suppliers. - Assess completed questionnaires and supporting fieldwork materials for completeness and alignment with JPMC expectations. - Lead medium and low-risk supplier virtual assessments, providing expertise on IT and cybersecurity risks and controls. - Identify control breaks and vulnerabilities within supplier's IT environment. - Document findings and work with the LOB Delivery Manager and Information Security Manager to address issues through action plans or risk acceptance approvals. - Validate evidence from the supplier before closing action plans. - Escalate supplier-related issues when necessary. - Identify opportunities for process improvements to enhance operational efficiency. - Propose enhancements to supplier posture and JPMC's supplier management processes. - Assist with various SAS program initiatives under the guidance of SAS Leads. Qualification Required: - 8+ years of experience in Technology, Technology Risk & Controls, Technology Audit, Cybersecurity, Application Security, Cloud Security (SaaS, PaaS & IaaS), Network Security, Cyber Resiliency, and Third Party Outsourcing Risk Management in a large enterprise environment. - Good understanding of Third-Party Oversight and Supplier Assurance Programs, lifecycle, execution best practices, and supplier risk awareness. - Experience in Supplier Management, Risk and Controls Management, Technology Audit, or Information Security teams. - Strong written and verbal presentation skills at the senior management level. Additional details about the company: JPMorgan Chase, a leading financial institution with over 200 years of history, provides innovative financial solutions to millions of customers worldwide. They are committed to diversity, inclusion, and equal opportunities for all employees, valuing the diverse talents that contribute to their global workforce's success. JPMorgan Chase is an equal opportunity employer, making reasonable accommodations for employees' needs and religious practices.

You will be a Supplier Control Assessor in the Supplier Assurance Services (SAS) team at JPMC. Your main responsibility will be to perform virtual technical risk and control assessments of medium and low-risk supplier environments to ensure compliance with JPMC Corporate Policies & Standards and validate that technical risks are managed and security controls are implemented. You will be part of the Supplier Control Assessment (SCA) team and collaborate with CTC and Lines of Business (LOBs) to assess supplier's control environments.

- Engage with multiple LOB Delivery Managers to ensure compliance with required assessments per JPMC policy and procedures. - Drive all aspects of the control assessment of suppliers. - Assess completed questionnaires and supporting fieldwork materials for completeness and alignment with JPMC expectations. - Lead medium and low-risk supplier virtual assessments, providing expertise on IT and cybersecurity risks and controls. - Identify control breaks and vulnerabilities within supplier's IT environment. - Document findings and work with the LOB Delivery Manager and Information Security Manager to address issues through action plans or risk acceptance approvals. - Validate evidence from the supplier before closing action plans. - Escalate supplier-related issues when necessary. - Identify opportunities for process improvements to enhance operational efficiency. - Propose enhancements to supplier posture and JPMC's supplier management processes. - Assist with various SAS program initiatives under the guidance of SAS Leads. Qualification Required: - 8+ years of experience in Technology, Technology Risk & Controls, Technology Audit, Cybersecurity, Application Security, Cloud Security (SaaS, PaaS & IaaS), Network Security, Cyber Resiliency, and Third Party Outsourcing Risk Management in a large enterprise environment. - Good understanding of Third-Party Oversight and Supplier Assurance Programs, lifecycle, execution best practices, and supplier risk awareness. - Experience in Supplier Management, Risk and Controls Management, Technology Audit, or Information Security teams. - Strong written and verbal presentation skills at the senior management level. Ad