Drimva

JPMorgan Chase

Supplier Cybersecurity Assessor - Vice President

Columbus, OH +1 · Director · Full-time · Posted Oct 8, 2026

Location
Columbus, OH
Plano, TX
Experience
Minimum of 7 years in cybersecurity, technology risk, technology controls, technology audit, cloud security, supplier risk management, or related disciplines within a large enterprise environment.

About the job

Assesses cybersecurity and technology risks in third-party supplier and cloud-hosted environments, documents findings, and supports remediation and improvements to assessment practices.

What you'll do

  • Assess supplier controls, architectures, evidence, and adherence to security standards; identify risk exposures.
  • Document findings and remediation recommendations, translating technical observations into business risk outcomes.
  • Improve assessment methods and reporting, monitor cyber developments, and use approved AI tools with appropriate oversight.

What they ask for

  • Expertise in one or more cybersecurity domains and understanding of security frameworks such as ISO 27001, ISO 27002, or NIST Cybersecurity Framework.
  • Ability to assess technical controls and evidence, influence stakeholders, and communicate risk conclusions to senior audiences.
  • Experience using approved AI-enabled productivity tools with accountability for accuracy and validation.
  • CISSP, CISA, CISM, CCSP, or CRISC certification.

Nice to have

  • Experience assessing public cloud environments, including AWS, Microsoft Azure, or Google Cloud Platform; cloud security or architecture certifications.
  • Experience in financial services or another highly regulated industry.

Tools

ISO 27001, ISO 27002, NIST Cybersecurity Framework, AWS, Microsoft Azure, Google Cloud Platform

AI focus

Uses approved AI-enabled tools to improve assessment preparation, documentation, analysis, efficiency, consistency, and risk insight, with appropriate oversight and validation.

Model-written summary · the original posting is authoritative

First seen Oct 28, 2026 · Last verified Nov 6, 2026 (UTC)