Penetration Test North America Lead

JPMorgan Chase - Columbus, OH

Full-time - Mid Level

Columbus, OH

Credit Intermediation and Related Activities

About the position

As the Penetration Test North America Lead, you will play a pivotal role in enhancing the cybersecurity and resilience posture of the firm. This position is part of the Assessments & Exercises team within the Cyber and Tech Controls line of business at JPMorgan Chase. Your primary responsibility will be to lead a team of highly skilled penetration testers who conduct manual assessments to replicate relevant cybersecurity threats targeting the firm. You will contribute significantly to the firm's security strategies by employing industry-standard assessment methodologies and techniques to proactively identify risks and vulnerabilities across people, processes, and technology. In this role, you will design and deploy risk-driven tests and simulations, or manage a team that executes these tasks, ensuring that the analysis clearly outlines root causes of vulnerabilities. You will evaluate preventative controls, incident response processes, and detection capabilities, advising cross-functional teams on security strategy and risk management. Your leadership will be crucial in managing the technical team, guiding them in delivering advanced application and network exploitation assessments. You will also be responsible for developing and refining assessment methodologies, tools, and frameworks to ensure alignment with the firm's strategy and compliance with regulatory requirements. Collaborating closely with cross-functional teams, you will develop comprehensive assessment reports that include detailed findings, risk assessments, and remediation recommendations, making data-driven decisions that promote continuous improvement. Staying informed about emerging threats, vulnerabilities, and industry best practices will be essential, as you will apply this knowledge to enhance the firm's assessment strategy and risk management efforts. Engaging with peers and industry groups to share threat intelligence analytics will further strengthen the firm's cybersecurity posture.

Responsibilities

• Manage a technical team of highly skilled and qualified Penetration Testers
• Design and execute testing and simulations such as penetration tests, technical controls assessments, cyber exercises, or resiliency simulations
• Contribute to the development and refinement of assessment methodologies, tools, and frameworks
• Evaluate controls for effectiveness and impact on operational risk, and identify opportunities to automate control evaluation
• Collaborate closely with cross-functional teams to develop comprehensive assessment reports, including detailed findings, risk assessments, and remediation recommendations
• Utilize threat intelligence and security research to stay informed about emerging threats and vulnerabilities
• Engage with peers and industry groups to share threat intelligence analytics

Requirements

• 5+ years of experience in cybersecurity or resiliency
• Demonstrated exceptional organizational skills to plan, design, and coordinate the development of offensive security testing, assessments, or simulation exercises
• Proven ability to manage teams of technical staff
• Experience or ability to create long-term strategic plans
• Strong written and oral communication skills
• Project management experience