{"id":3428653,"url":"https://alion.io/job/jpmorganchase-tech-risk-third-party-lead","title":"Tech Risk - Third Party Lead","company":{"id":257,"name":"JPMorganChase","domain":"jpmorganchase.com","url":"https://alion.io/company/jpmorganchase","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":89,"open_postings":1162,"ghost_share":0.013,"stale_share":0.555,"repost_share":0.058,"time_to_fill_p50_days":12,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Columbus, United States","Plano, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":172000,"max_usd":354000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":453},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Alteryx","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"ServiceNow","optional":false},{"name":"Tableau","optional":false}],"status":"live","first_seen_at":"2026-09-11T01:51:44Z","employer_posted_date":"2026-09-11","last_verified_at":"2026-11-01T19:17:28Z","board_verified":true,"closed_at":null,"days_open":52,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":52},"description":"The Tech Risk - Third Party Lead at JP Morgan Chase within Cybersecurity and Tech Controls, leads oversight and continuous improvement within third-party cyber assessment capability and broader third-party assurance program. You'll define and execute the third-party assurance strategy and help shape the operating model, priorities, and roadmap, translating strategy into scalable processes, clear governance, and measurable outcomes. You will focus on meeting executive stakeholder expectations through high-quality reporting, metrics, and risk insights; identifies themes and emerging risks; and drives remediation, policy/standard alignment, and process enhancements to strengthen end-to-end third-party risk management practices. . You will play a crucial role in fostering a robust risk culture and catalyzing continuous improvement, contributing to the development and implementation of comprehensive risk management policies, standards, and controls.\nJob Responsibilities\nLead efforts to strengthen the firm’s third-party risk assessment and control environment, identifying areas for improvement and advising on control implementation to mitigate thematic risks.\nInfluence, drive, and oversee the efficient execution of third party assurance programs, ensuring alignment with organizational objectives, risk appetite, and regulatory compliance, while continuously updating requirements to address evolving threats and regulatory changes.\nPrepare and deliver reports and metrics to provide insights into risk trends and program effectiveness, engaging with stakeholders to communicate the status of third-party cyber and technology risks.\nCollaborate with Control Owners to establish and uphold clear cyber, technology, and data control requirements for all third-party relationships. \nAct as a liaison to Global Supplier Services, Tech Risk and Controls, Product Security, Business Control Managers, and GRC leads to foster a collaborative approach to third-party risk management.\nUses enterprise-authorized AI capabilities within the work environment to accelerate synthesis of risk/control evidence and draft executive-ready reporting, validating outputs and handling data according to sensitivity and security requirements\nPromotes reuse-first, AI-assisted approaches to streamline recurring control testing and issue/action-plan management routines, ensuring human review and alignment to auditability and regulatory expectations\nStay abreast of industry developments, emerging threats, and best practices to ensure the program remains cutting-edge.\nRequired qualifications, capabilities, and skills\nObtain 5 plus years of experience in third-party risk management, cybersecurity, technology risk, or related disciplines and/or Bachelor’s degree in Information Security, Cybersecurity, Risk Management, Business Administration, or related field; Master’s degree a plus\nExperience in a highly regulated industry (e.g., financial services, healthcare) is strongly preferred.\nProven ability to lead cross-functional teams, influence senior stakeholders, and drive strategic initiatives.\nDeep understanding of third-party risk management frameworks, cybersecurity controls, and regulatory requirements (e.g., OCC, FFIEC, GDPR, ISO 27001, NIST), experience utilizing a range of GRC (Governance, Risk, and Compliance) and data analytics platforms, such as Archer, ServiceNow, Alteryx, Tableau, and QlikView.\nDemonstrated experience using enterprise-authorized AI capabilities within the work environment to support technology risk and controls workflows with strong validation habits and awareness of data sensitivity.\nAbility to review and validate AI-assisted risk summaries and recommendations before use, escalating when uncertain and ensuring outcomes align to security, auditability, and regulatory expectations.\nStrong analytical skills with experience developing and presenting risk metrics, dashboards, and executive-level reports.\nExperience working with legal and procurement teams to negotiate and strengthen contractual provisions related to cybersecurity and data protection.\nExcellent interpersonal and communication skills, with the ability to build relationships and collaborate across business units and technical teams.\nDemonstrated ability to manage complex programs and projects, prioritize competing demands, and deliver results in a fast-paced environment.\nCommitment to continuous improvement, staying current with industry trends, emerging threats, and best practices.\nPreferred qualifications, capabilities, and skills\nCertified Third Party Risk Professional (CTPRP), Certified Regulatory Vendor Program Manager (CRVPM), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC)\nPerform as a Strategic thinker with a hands-on approach\nAbility to work independently and as part of a team\nAdaptability to changing regulatory and business environments","description_format":"text","description_chars":4989,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Wealth Management & Financial Advisors","Asset Management & Funds","Security Compliance","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-10-28T23:25:47Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3,429 · green card filings: 933","filings_12m":3429,"filings_prev_12m":3601,"green_card_filings_12m":933,"median_offered_wage_usd":160366,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":88}],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.344,"p_room":0.28,"age_days":52,"expected_fill_days":12,"reasons":["conf:10","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/jpmorganchase-tech-risk-third-party-lead","json_url":"https://alion.io/job/jpmorganchase-tech-risk-third-party-lead.json","meta":{"generated_at":"2026-11-02T07:12:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10180,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":257},"rest":"https://alion.io/mcp/rest/get_company?id=257"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjpmorganchase-tech-risk-third-party-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjpmorganchase-tech-risk-third-party-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjpmorganchase-tech-risk-third-party-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jpmorganchase-tech-risk-third-party-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjpmorganchase-tech-risk-third-party-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3428653}},{"tool":"search_jobs","arguments":{"company":"jpmorganchase.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3428653},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}