Welcome to the CISO Executive Network!
Please log in using the form to the right.
If you do not having a username and password, please take a moment to fill out our contact form to be considered for registration.
Please log in using the form to the right.
If you do not having a username and password, please take a moment to fill out our contact form to be considered for registration.
JPMorganChase opportunity. See listing here
Job Description
Director of Control & Governance, Information Risk & Security Management
Position is responsible for the oversight of the Control and Governance program for Card Services Information Risk & Security Management. Individual will drive strategy and implementation of a program to monitor the control effectiveness across Card technology functions, lead the Third Party Oversight function, and support Merchant Security and Compliance. Individual will also participate in a number of firm-wide programs to help drive consistent and effective risk-based approaches across JPMorgan Chase. Responsibilities will include, but not be limited to:
•Be a thought leader with the ability to influence risk programs from a line of business, firm wide and industry level
•Manage the Third Party Oversight function for Card Services, executing a risk-based strategy to ensure confidential data is appropriately controlled.
•Coordination of Control Self Assessment program, including establishing control substantiation and quality assurance programs across Card technology and business managed technology.
•Manage the compliance program for the Payment Card Industry Security Standards, including coordination of the annual Card Services assessment and managing firm-wide PCI compliance.
•Coordination of Sarbanes-Oxley, SAS70, and applicable regulatory testing across Card technology. Also includes the on-going assessment and impact analysis of new and emerging state, federal, and global legislation and regulations.
•Liaison to internal and external Audit and Compliance associates, including ongoing monitoring of open issues and action plans and corresponding metrics.
•Lead the Merchant Compliance Programs, including Merchant PCI Compliance, Third Party Registration, and compromise investigations, developing a risk-based approach for managing to Association requirements.