Job Description
JPMorgan Chase’s (JPMC) Corporate Third-Party Oversight (CTPO) Program, part of Global Supplier Services, is responsible for developing, implementing, and overseeing the framework that ensures effective use of suppliers to achieve strategic goals. The CTPO Program covers oversight of both external third-party suppliers (TPO) and internal intra-affiliate (IAO) services, and includes Supplier Controls Intelligence (SCI) and Third Party Risk Management (TPRM). The program also builds awareness across the firm, ensures global consistency across all Lines of Business (LOBs) and Corporate Functions (CFs), and manages outsourcing regulatory requirements, including periodic updates to regulators.

As a Controls Intelligence Lead within Third Party Continuous Monitoring (TPCM), you will be responsible for developing, maintaining, and leading the integration of supply chain cyber risk and intelligence sources to maximize visibility of cybersecurity threats and vulnerabilities across the supply chain for both internal and external stakeholders. You will collaborate with governance, risk and controls, and product teams to develop an effective cyber threat intelligence and supply chain risk management platform. This role is central to the development and operationalization of CTPO’s new Third Party Continuous Monitoring (TPCM) initiative, with a focus on cyber risk, including documentation and regular updates to CTPO leadership.

Job Responsibilities:

• Coordinate with business units and leaders to ensure the Third Party Cyber Intelligence capability meets evolving cybersecurity and business needs.
• Develop and enhance strategic, operational, and tactical cyber intelligence capabilities to provide detailed visibility into supply chain cyber risks and enable effective risk mitigation.
• Lead implementation of the program, own and enhance cyber intelligence processes, and partner with teams to improve decision-making based on curated cyber threat intelligence.
• Support the execution of the continuous monitoring risk and control program to mitigate cybersecurity risks (e.g., operational, IT controls, cyber threats, data breaches).
• Assist in identifying, evaluating, and managing operational and IT-related cyber risks in line with regulations, cybersecurity standards, and the JPMC enterprise framework.
• Develop and maintain reports on cyber risk events, incidents, and their impact on the firm’s control environment.
• Respond to ad-hoc supplier cyber risk queries from stakeholders.

Required qualifications, skills, and capabilities:

• Minimum of 5 years experience in a cybersecurity analysis role, such as cyber threat intelligence, threat hunting, malware analysis, digital forensics, or incident response; financial services experience.
• Strong knowledge of cybersecurity controls, risk management, compliance practices, cybersecurity standards (e.g., NIST, ISO 27001), and financial services regulations.
• Ability to understand complex technical systems and related business processes, assess associated cyber risks and controls, and recommend improvements as needed.
• Proven ability to build relationships with senior business executives and partner across organizational lines to mitigate cyber risks.
• Highly disciplined, able to work independently and make sound decisions with limited supervision.
• Strong organizational, project management, and multitasking skills, with a demonstrated ability to manage expectations and deliver results.
• High level of professionalism, self-motivation, and a strong sense of urgency.