Insider Risk Program Manager

JPMorgan Chase & Co. (NYSE: JPM) is a leading global financial services firm that comprises an important part of the financial sector and U.S. critical infrastructure with assets of $2.6 trillion and operations worldwide. The firm is a leader in investment banking, financial services for consumers and small business, commercial banking, financial transaction processing, and asset management. A component of the Dow Jones Industrial Average, JPMorgan Chase & Co. serves millions of consumers in the United States and many of the world’s most prominent corporate, institutional and government clients under its J.P. Morgan and Chase brands. Information about JPMorgan Chase & Co. is available at www.jpmorganchase.com.

Global Security (GS) protects the firm's employees and assets throughout the world. This responsibility includes the development of security and safety policies and procedures, regulatory and legislative compliance, corporate aviation, guard management, alarm response, crisis management, ATM, branch and corporate building security and customer safety, physical crime investigations, workplace violence, fire and life safety, pre-employment screening, fraud and employee investigations.

Within GS, the Threat Detection and Analysis team is responsible for identifying potential threats against the firm and its workforce from internal and external actors and developing strategies to mitigate those threats to protect the firm’s reputation, workforce, clients, and assets. 

 

This VP position will be responsible for development and delivery of cutting-edge enterprise-wide technology solutions to detect and analyze insider risks and overseeing triage of insider events and insider risk analysis by a team of analysts.  The candidate must be a highly motivated individual with strong interpersonal skills able to leverage their technical, insider risk, cybersecurity, threat analysis, and/or counterintelligence experience to work on multiple assignments in accordance with dynamic priorities in a fast-paced environment. The position will work closely with various partners within the firm including but not limited to HR, Legal, Cybersecurity, and Technology, as well as external partners. The ability to work effectively with a diverse set of stakeholders is essential. The role requires creativity, critical thinking, strong communication skills, and the ability to work effectively across a large global organization.

 

Scope:

• Responsible for critical strategic deliverables for the Insider Risk Program executed in accordance with data privacy and legal requirements and expectations.
• Supervise and lead a team of analysts conducting triage of events generated by monitoring use cases, producing contextual data-driven analysis of insider incidents, risk analysis, and threat assessment.
• Facilitate referral of anomalous activity for investigation, escalation to other SMEs, and cross-functional coordination of mitigation strategies.
• Monitor internal and external Intel for notable insider events & coordinate insider incident topology analysis for risk and response action assessment.
• Provide SME-level support insider risk matters leveraging deep knowledge of insider risk, cyber security, and counterintelligence.
• Communicate complex problem sets in succinct and clear manner that is understandable to a variety audience across the firm.
• Align and socialize the insider risk program across multiple stakeholders, senior managers, and executives; synthesize findings and present updates and recommendations.
• Manage program governance documentation, including definition of roles and responsibilities and support compliance with the control environment.
• Work and collaborate with critical stakeholders, within the firm, financial sector, across other industries and the U.S. Government, to stay abreast of industry trends and best practices.  

 

Qualifications: 

• 8-10 years relevant work experience supporting an insider risk, cybersecurity and/or counterintelligence program, investigations or risk analysis; assessing complex threats; scoping and developing mitigation strategies in coordination with cross-functional teams and technical domains.
• Minimum of an Undergraduate degree, preferably a master’s degree related to Intelligence Studies, Forensic Science, Security Studies, Computer Science, Cybersecurity, Data Analysis, or a related field.
• Experience conducting risk assessments and in-depth multi-source research on threat actors, tactics, techniques, and emerging trends to inform risk scenarios, evaluate control environment and develop mitigation strategies.
• Experience supervising direct