JPMorgan Chase
Tech Risk - Third Party Lead
$114K–$200K
Jersey City, NJ +2 · Full-time · Posted Sep 11, 2026
- Location
- Jersey City, NJ
Columbus, OH
Plano, TX - Experience
- 5+ years; the posting states experience and/or a bachelor’s degree as alternatives.
- Education
- Bachelor’s degree in Information Security, Cybersecurity, Risk Management, Business Administration, or a related field; Master’s degree a plus.
About the job
Leads third-party cyber and technology assurance strategy and programs, strengthening risk controls, governance, reporting, and continuous improvement.
What you'll do
- Oversee and improve third-party risk assessments and assurance programs, aligning them with organizational objectives, risk appetite, and regulatory requirements.
- Develop risk metrics and executive reporting, identify emerging themes, and drive remediation and control improvements with stakeholders.
- Use enterprise-authorized AI to assist with evidence synthesis, reporting, testing, and issue management, validating outputs and protecting sensitive data.
What they ask for
- 5+ years of experience in third-party risk management, cybersecurity, technology risk, or related disciplines, and/or a bachelor’s degree in a related field.
- Experience leading cross-functional teams, influencing senior stakeholders, and driving strategic initiatives.
- Understanding of third-party risk frameworks, cybersecurity controls, regulatory requirements, and GRC or data analytics platforms.
- Experience using enterprise-authorized AI for technology risk and controls workflows, with validation and data-sensitivity awareness.
Nice to have
- Experience in a highly regulated industry is strongly preferred.
- CTPRP, CRVPM, CISSP, CISM, or CRISC certification.
Pay
USD $147,250.00-$200,000.00 base salary (Jersey City, NJ); USD $114,000.00-$165,000.00 base salary (Columbus, OH); USD $123,500.00-$175,000.00 base salary (Plano, TX)
Tools
Archer, ServiceNow, Alteryx, Tableau, QlikView, OCC, FFIEC, GDPR
AI focus
Uses enterprise-authorized AI to synthesize risk and control evidence, draft executive reporting, and streamline control testing and issue management, with human validation and attention to sensitivity, security, auditability, and regulatory expectations.
Model-written summary · the original posting is authoritative