Job responsibilities

• Ensure complete and accurate understanding of and responses to requests for Supplier Control Assessment program and execution information:
• Rigor – Clearly interpret and articulate requests as needed; manage, review and approve standard responses and artifact submission; develop and present complex responses to leadership, key stakeholders and partners
• Accountability – Ensure requests are tracked and presentation is overseen to quality standards and timely completion
• Transparency – ensure proactive escalation of matters requiring further review or intervention
• Support key stakeholders and partners in understanding relevant aspects of the Third Party Oversight and Supplier Assurance Services programs, lifecycle, execution practices and supplier risk awareness in order to support collective exam management activities
• Partner with CTPO Exam Management, Supplier Assurance Services Assessment Operations and regional SAS Governance and Stakeholder Management functions to drive appropriate and timely treatment of requests for information
• Identify opportunities for improving the SAS exam management function and activities, as well as JPMC's Third Party Oversight and Supplier Assurance Services programs

Required Qualifications, Skills and Capabilities

• A minimum of 7 years of experience in a cybersecurity, technology and operational controls, information security, technology audit, technology compliance, third party risk management governance or technology outsourcing discipline 
• Good communication and presentations skills across various stakeholders and senior management, with the ability to directly and positively influence
• Good time management and planning skills along with the ability to handle multiple assignments at the same time 
• Excellent knowledge of assessment processes, including the identification and classification of risk
• Bachelor’s degree in a relevant discipline
• Possession of an active security or information risk certification ( e.g. CISA, CISSP, CISM, CRISC, etc.)