Provides senior technical leadership for third-party cybersecurity assurance. Conducts complex supplier assessments, threat modeling, cloud and hybrid architecture reviews, and control maturity evaluations. Translates technical findings into business-relevant risk insights, advises on remediation, evolves assurance methodologies, and identifies systemic supplier weaknesses. Partners with cybersecurity, technology risk, product security, and business stakeholders while serving as the escalation point for complex supplier risks.
Job Summary
As an Executive Director within the Cybersecurity and Technology Controls (CTC) Assessments & Exercises function, you will serve as the senior technical authority for third-party cybersecurity assurance. You will bring deep, hands-on expertise in cybersecurity architecture, cloud security, and enterprise control frameworks to critically evaluate the control maturity of the firm's most complex and strategically significant suppliers.
Reporting to the Global Third-Party Assurance Lead, you help to elevate the technical rigor, depth, and credibility of third-party assurance outcomes. You will translate complex technical findings into clear, business-relevant risk insights for senior stakeholders across Cybersecurity, Technology, Risk, and the Business, and will act as a trusted escalation point for the most technically challenging assessments.
Job Responsibilities
- Provide authoritative technical leadership across third-party cybersecurity assessments, bringing deep expertise in cybersecurity architecture, cloud-native and hybrid environments, application security, and enterprise control domains.
- Lead and personally conduct in-depth technical evaluations of supplier cybersecurity posture, control maturity, and architectural resilience, particularly for the firm's most critical and complex third-party relationships.
- Perform threat modelling against supplier environments to identify potential security risks and develop mitigation strategies tailored to the firm's risk appetite.
- Evaluate supplier security architectures across public cloud providers (AWS, Azure, Google Cloud), assessing the design and effectiveness of controls in cloud-native, hybrid, and on-premises environments.
- Act as the senior technical escalation point for complex supplier risks, control gaps, and remediation strategies, providing credible challenge and expert advisory input.
- Drive the evolution of the third-party assurance methodology by embedding deeper technical assessment capabilities, including architecture reviews, threat modelling, and cloud security posture evaluation.
- Translate complex technical cybersecurity risks and supplier control deficiencies into clear, actionable, business-relevant insights for senior leadership and non-technical audiences through detailed reports, presentations, and other appropriate methods.
- Partner with Product Security, Cybersecurity Architecture, Technology Risk & Controls, and Cybersecurity pillar leads to ensure alignment in control intent, solution design, and third-party risk remediation.
- Lead thematic analysis to identify systemic technical weaknesses, emerging risks, and trends across the supplier landscape, and recommend strategic remediation approaches.
Required Qualifications, Capabilities, and Skills
- 10+ years of professional experience in cybersecurity, with significant depth in senior technical and/or architecture-focused positions.
- Proven ability to assess and articulate the cybersecurity control maturity of complex technology environments, including enterprise, cloud-native, and hybrid architectures.
- Deep, hands-on expertise in cybersecurity architecture, threat modelling, and designing or evaluating secure controls for enterprise-level solutions.
- Strong understanding of industry cybersecurity frameworks and key control domains (e.g., NIST CSF, ISO 27001, FFIEC, SOC 2, GDPR).
- Thorough design and operational experience across one or more major public cloud providers (AWS, Azure, Google Cloud), with relevant certifications advantageous.
- Proficiency with Cloud Security Posture Management (CSPM) tools and cloud security assessment methodologies.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
The Cybersecurity & Technology Controls group at JPMorganChase aligns the firm’s cybersecurity, access management, controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group’s number one priority is to enable the business by keeping the firm safe, stable and resilient.
High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of the integrity of staff by virtue of 1) sensitive cybersecurity and technology functions they perform within systems or 2) information they receive regarding sensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hire screening which includes both criminal and credit background checks (as allowed by law). The enhanced screening will need to be successfully completed prior to commencing employment or assignment.
JPMorganChase London, England Office
25 Bank Street, Canary Wharf, London, United Kingdom, E14 5JP
Similar Jobs
Fintech • Payments • Software
Leads the global payer experience and loyalty strategy across Flywire’s payments platform. Owns checkout, hosted payment pages, payment flows, localization, notifications, conversion optimization, retention, and customer satisfaction. Drives platform modernization, experience architecture, AI-enabled product development, and consolidation of fragmented experiences. Acts as executive advocate for customers while influencing Product, Engineering, Network, Operations, and Commercial teams. Builds and leads a global product organization focused on experimentation, analytics, scalable payment experiences, and customer loyalty.
Top Skills:
A/B Testing PlatformsAIAmplitudeCloud-Native Saas PlatformsConfluenceFigmaJIRALookerMixpanelPayment ApisTableau
Fintech • Mobile • Payments • Software • Financial Services
Manage and grow Wise’s EMEA bank partner accounts by identifying upsell and cross-sell opportunities, developing account plans, leading partner business reviews, and coordinating deal execution. Build senior stakeholder relationships, use data to identify growth opportunities, provide performance updates, and contribute to product, pricing, and go-to-market initiatives. The role requires expertise in cross-border payments and collaboration with sales, customer success, product, engineering, compliance, legal, and delivery teams.
Top Skills:
Cross-Border Payments InfrastructureWise Platform
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Lead infrastructure automation and DevOps engineering across public, private, and on-premises cloud environments. Build and optimize CI/CD pipelines, provision containerized and virtualized systems, implement Infrastructure as Code, and improve observability, reliability, scalability, and cost efficiency. Develop automation in Go, troubleshoot complex distributed systems, collaborate with global engineering teams, and align platform initiatives with business objectives.
Top Skills:
AnsibleAWSAzureBashChefDocker ComposeDruidDynatraceGCPGithub ActionsGoGrafanaHelmJenkinsKubernetesLinuxPrometheusPythonRubySplunkTerraform Enterprise
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
