Security Operations Vice President, Vulnerability Management

About the role

J.P. Morgan is hiring a Security Operations Vice President for its Vulnerability Management team in Singapore, part of a follow-the-sun global team within Cybersecurity & Tech Controls. The role covers firm-wide impact analysis, risk assessment and coordination of critical vulnerabilities affecting applications and infrastructure, working with Line of Business teams, vendors, risk and control functions and production management.

Key responsibilities

• Review new vulnerabilities from multiple sources, rate them against proprietary and industry standards, and use enterprise-authorized AI tools to speed triage and incident reporting
• Document impacted assets and applications, assess threat actor intelligence, exploit and conceptual code, recommend mitigations and define remediation
• Assess security researcher findings and drive global teams' daily workflows through case-load analysis and prioritization
• Act as technical lead and representative on major incidents, and build strong relationships with Cybersecurity Operations and technology leaders
• Promote reuse-first adoption of AI-assisted workflows that meet security, resiliency and auditability expectations

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, Data Science or a related discipline
• 5+ years in a Cyber Operations or Vulnerability Management role, with end-to-end workflow knowledge (CVE, CPE, CVSS)
• Experience coordinating incident management and cyber incident response
• Previous 24x7 operations experience
• Preferred: vulnerability research and exploit development aptitude, and experience with frontier AI models

Required skills

• Cybersecurity controls (physical, logical, processes and procedures)
• Vendor products such as Oracle Java, VMware, F5, Citrix, Microsoft, and open-source software in large estates
• Cloud (public and private) and vulnerability scanning tools
• SQL, JSON, APIs, Splunk, Agile, Jira and backlog management
• Validating AI-assisted findings and escalation when uncertain