Job Description

Help strengthen third-party risk practices through clear advisory guidance, effective governance, and actionable reporting. You will partner closely with business and functional stakeholders to identify control gaps, drive timely supplier actions, and support sustained control effectiveness. In this role, you will influence outcomes through thoughtful challenge, practical solutions, and strong stakeholder management. You will also help evolve our advisory approach and supporting framework as our risk landscape changes.

As a Third-Party Risk Advisory Vice President (Vice President) within Corporate Third-Party Oversight Risk Management, you will serve as a key risk advisor to business and functional stakeholders and act as a primary point of contact for third-party risk observations, issue identification, and advisory guidance. You will lead discussions with business owners, governance forums, and control partners to drive timely supplier actions and sustain control effectiveness. You will deliver executive-ready updates for Operational Risk leadership and senior stakeholders, while helping shape and mature the advisory approach and supporting framework.

Our team provides independent risk oversight and advisory support for third-party relationships, with a focus on identifying control gaps, improving risk transparency, and enabling effective remediation. You will work across multiple stakeholder groups to ensure third-party risk decisions are well-governed, well-documented, and outcome-oriented. You will help reinforce strong, sustainable practices that support operational resilience and responsible third-party management.

Job responsibilities

• Advise business and functional stakeholders on third-party and outsourcing risk requirements, expectations, and governance processes
• Assess third-party risk observations, including control gaps and residual risk, and recommend practical mitigation actions
• Challenge and strengthen third-party operational resilience practices, including exit planning, to support measurable and actionable outcomes
• Define and maintain advisory guidance and governance expectations for supplier artificial intelligence (AI) usage to support continuity and compliant adoption
• Lead risk decision forums by framing trade-offs, documenting decisions, and driving follow-through on agreed actions and commitments
• Partner with control, compliance, and risk stakeholders to align remediation plans to program expectations and control objectives
• Identify process and control improvements that increase transparency, efficiency, and sustained risk reduction across third-party oversight activities
• Prepare executive-ready reporting for Operational Risk leadership and senior stakeholders, translating observations into clear updates and actions
• Monitor progress against remediation actions and escalate risks, delays, or blockers through appropriate governance channels
• Contribute to the ongoing maturation of the third-party risk advisory approach, including standards, playbooks, and stakeholder engagement practices

Required qualifications, capabilities, and skills

• Bachelor’s degree or equivalent practical experience
• Minimum 5 years of experience in third-party risk management, operational risk, audit, compliance, oversight and controls, or technology risk
• Experience assessing control design and operating effectiveness, including identifying gaps and articulating residual risk
• Experience partnering with business stakeholders to drive timely remediation and measurable outcomes
• Ability to produce clear, executive-ready written and verbal updates for senior stakeholders
• Strong organization and prioritization skills, with the ability to manage multiple deliverables in a dynamic environment
• Demonstrated ability to operate independently, apply sound judgment, and escalate issues appropriately
• Proficiency with Microsoft Excel, PowerPoint, and Word, and collaboration tools such as SharePoint

Preferred qualifications, capabilities, and skills

• Experience working with procurement, legal, compliance, technology, information security, or other control functions supporting third-party risk
• Familiarity with third-party governance models, risk decision forums, and issue management practices
• Experience with operational resilience topics, including supplier resiliency and exit planning
• Exposure to evaluating third-party use of AI, including governance, risk controls, and continuity considerations
• Professional certifications such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Internal Auditor (CIA), or similar

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.