Assessments & Exercises Associate

JPMorgan Chase & Co.•Washington, DC

21h

About The Position

Embark on a journey to fortify our security framework, leveraging your skills in assessments and exercises. This role offers a platform to contribute to our relentless pursuit of cybersecurity excellence and resilience, presenting a unique chance to impact our strategic approach to risk management and operational integrity. As an Assessments & Exercises Associate in Cybersecurity Technology and Controls Team, you will play a vital role in enhancing the firm's cybersecurity or resiliency posture. Use industry-standard assessment methodologies and techniques to proactively identify risks and vulnerabilities in people, processes, and technology. Collaborate with a team to conduct risk-driven tests and simulations and contribute to the development of assessment and test reports. Help evaluate preventative controls, incident response processes, and detection capabilities, and explore opportunities to automate evaluation operations.

Requirements

2+ years of experience in cybersecurity or resiliency, with a focus on offensive security testing, assessments, or simulation exercises
Working knowledge of common cybersecurity threats and technology resiliency risks pertaining to the US financial services sector
Proficiency in at least one security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents
Strong collaboration and communication (written and verbal) skills, with the ability to work effectively with cross-functional teams and convey complex cybersecurity concepts to diverse stakeholders

Nice To Haves

Hold relevant industry certifications – such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Associate Business Continuity Professional (ABCP) – showcasing advanced expertise in cybersecurity and offensive testing methodologies or resiliency
Knowledge/experience in modern programming language

Responsibilities

Collaborate with other Assessments & Exercises team members to conduct testing and simulations – including, technical controls assessments, cyber exercises, or resiliency simulations, and contribute to the development and refinement of assessment methodologies to ensure alignment with industry standards and regulatory requirements
Partner with subject matter experts to evaluate controls for effectiveness and impact on operational risk, as well as opportunities to automate control evaluation
Collaborate with cross-functional teams to analyze assessment outcomes and help develop recommendations
Utilize threat intelligence and security research to stay informed about emerging threats, vulnerabilities, and industry best practices, and apply this knowledge to enhance the firm's security strategy and risk management