Associate, Supplier Cybersecurity Controls Assessor

About the role

Supplier Assurance Services (SAS) team at J.P. Morgan conducts comprehensive risk assessments of third‑party suppliers to strengthen the firm’s supply‑chain security. The Associate reviews supplier security stacks, performs onsite or virtual assessments, identifies cyber risks and documents remediation plans while staying current on adversarial tactics. Bengaluru, India, on‑site role, Full-time.

What you’ll do

• Review supplier security stacks and conduct field work to verify controls
• Provide cybersecurity risk and controls expertise during assessments
• Identify risks and weaknesses in supplier IT and cloud environments and document remediation plans
• Stay informed of latest cyber threats and adversarial tactics
• Identify process improvement opportunities for operational efficiency

What you’ll bring

• 8-10 years experience in technology risk & controls, cyber operations, application security, cloud security (SaaS, PaaS, IaaS)
• Advanced knowledge of cybersecurity defensive architectures and processes
• Experience with incident management, handling, investigations and root cause analysis
• Senior‑level written and verbal presentation skills to business stakeholders

Nice to have

• CISSP
• CCSP

Skills