Information Security Assessor

2 weeks ago

Bengaluru, Karnataka, India JPMorgan Chase Bank, N.A. Full time

The scope of work includes control assessments for the various programs covering Financial (SOX, CCAP etc.), Payment Card (PCI), Cyber, Privacy (GLBA, GDPR etc.), Application (ARA) and Infrastructure (ICA) across both Regulatory and Organizational Compliance needs.


These control assessments comply with relevant global regulations and JPMC information security policies, procedures and standards catering to technology teams for all Lines of Business (LOB) in the organization.


Job responsibilities

  • Conduct high quality control assessment operations for Global Technology across annual firm wide regulatory programs ( Financial (SOX, CCAP, etc.), Privacy (GLBA, GDPR, etc.), Payments (PCI), AND Internal compliance to Application and Infrastructure Control Domains
  • Integral part of a team responsible for execution of annual firm wide SOX/ CCAP program, testing the evidence of the controls and identifying any significant control deficiencies, working with the appropriate Assessment leads/ Technology Control Officer to identify appropriate remediation to improve the controls as necessary.
  • Integral part of a team for execution of firm wide PCI DSS compliance program and provide endtoend control oversight, assurance of compliance with requirements of the Data Security Standard, as well as risk and issue management and analysis.
  • Work with technology teams to walkthrough, gather control design requirements facilitate discussions and bring to closure control issues. Advise Lines of Business (LOBs), based on the testing their results to ensure they are in compliance with the Firm's guidelines.
  • Communicate issues and evaluate issues/findings and best practices with the rest of the team and manager. Perform QC reviews of control testing working papers.
  • Work actively with the Assessment Leads/ Technology Controls Officers on the guidance and ITrelated issues and participate in additional key control projects related to enhancement of the Compliance and other assessment programs. Support internal education and best practices sharing with peers and colleagues, as well as information security education & awareness, as needed.

Required qualifications, capabilities, and skills

  • Bachelor's degree preferably in Computer Science or Information Technology.
  • Minimum 57 years internal or external technology audit experience (\"Big 4\" experience preferred)
  • Have a strong background in Auditing, understanding of internal controls, particularly General Computer Controls (GCC).
  • Have an ability to effectively develop and communicate recommendations based on SOX Corporate Office (SCO) guidance.
  • Experience in Application assessment and control testing.
  • Experience in PCI DCC compliance requirement and control testing.
  • Be detail oriented with ability to evaluate processes, controls and issues to determine the risks.
  • Have an ability to maintain high standards with a drive to achieve the right answer in difficult and/or ever changing situations.
  • Can work independently, collaborate within a team and is comfortable in a virtual environment.

Preferred qualifications, capabilities, and skills

  • Proficient verbal and written communication skills, including the ability to effectively lead discussions and meetings with internal management, external/ internal audit and peer groups.
  • Strong interpersonal skills verbal communications, written communications, and a good track record of collaboration.
  • Proficient in MS Office
  • Microsoft Word, Excel, Access and PowerPoint.
  • CISA, CISSP, CISM, CRISC certification will be an added advantage.
  • Should have reasonable knowledge of APAC technology regulatory requirements


JPMorgan Chase & Co., one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P.

Morgan and Chase brands.

Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.


We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success.

We are an equal opportunity employer and place a high value on diversity and inclusion at our company.

We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law.

In accordance with applicable law, we make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as any mental health or physical disability needs.

  • Information Security Risk Assessor

    2 weeks ago

    Bengaluru, Karnataka, India eliterecruitments Full time

    Information Security Risk Assessor (ISRA):We are looking for an Information Security Risk Assessor (ISRA) to join our client's team. In this role, you will play a crucial part in securing our projects by design through the delivery of Information Security Assurance Plans based on ISO Risk Management principles.Location - Pune/BangaloreExperience - 4 To 10...

  • Security Assessor

    2 weeks ago

    Bengaluru, Karnataka, India Fime Full time

    Fime enables its clients to create and launch trusted and secure solutions with consulting and testing services in payments, smart mobility, biometrics, authentication and open banking. With 800+ experts around the world in 24 locations across Europe, the Middle-East, Americas and Asia, Fime is immersed as a multi-cultural environment.Inspired by the...

  • Information Security Assessor

    2 weeks ago

    Bengaluru, Karnataka, India JPMorgan Chase Bank, N.A. Full time

    Assist with the annual firm wide SOX / CCAP program, testing the evidence of the controls and identifying anysignificant control deficiencies, working with the appropriate Assessment leads/ Technology Control Officer to identifyappropriate remediation to improve the controls as necessary. Assist with the firm wide PCI DSS compliance program and provide...

  • Security Assessor smart Card Domain

    2 weeks ago

    Bengaluru, Karnataka, India Fime Full time

    Fime enables its clients to create and launch trusted and secure solutions with consulting and testing services in payments, smart mobility, biometrics, authentication and open banking.With 800+ experts around the world in 24 locations across Europe, the Middle-East, Americas and Asia, Fime is immersed as a multi-cultural environment.Inspired by the talented...

  • Security Assessor Smart Card Domain

    2 weeks ago

    Bengaluru, Karnataka, India Fime Full time

    Fime enables its clients to create and launch trusted and secure solutions with consulting and testing services in payments, smart mobility, biometrics, authentication and open banking. With 800+ experts around the world in 24 locations across Europe, the Middle-East, Americas and Asia, Fime is immersed as a multi-cultural environment.Inspired by the...

  • Information Security Engineer III

    2 weeks ago

    Bengaluru, Karnataka, India Conduent Business Services Full time

    Through our dedicated associates, Conduent delivers mission-critical services and solutions on behalf of Fortune 100 companies and over 500 governments - creating exceptional outcomes for our clients and the millions of people who count on them. You have an opportunity to personally thrive, make a difference and be part of a culture where individuality is...

  • Information Security Engineer III

    2 weeks ago

    Bengaluru, Karnataka, India Conduent Business Services India LLP Full time

    Through our dedicated associates, Conduent delivers mission-critical services and solutions on behalf of Fortune 100 companies and over 500 governments - creating exceptional outcomes for our clients and the millions of people who count on them. You have an opportunity to personally thrive, make a difference and be part of a culture where individuality is...

  • Information Security Engineer III

    4 weeks ago

    Bengaluru, Karnataka, India Conduent Business Services India LLP Full time

    Through our dedicated associates, Conduent delivers mission-critical services and solutions on behalf of Fortune 100 companies and over 500 governments - creating exceptional outcomes for our clients and the millions of people who count on them. You have an opportunity to personally thrive, make a difference and be part of a culture where individuality is...

  • Industrial Cybersecurity Assessor

    2 weeks ago

    Bengaluru, Karnataka, India UL Solutions Full time

    The Industrial Cybersecurity Assessor will evaluate the security of network-connectable devices, products, and industrial equipment systems. This will include the analysis of products under evaluation, the support and training of engineers for evaluation projects.Working on connected technologies Industrial OT/IIoT, IoT using the security framework,...

  • Information Security

    2 weeks ago

    Bengaluru, Karnataka, India Nityo Infotech Full time

    Auditing , Communication , English , Management , Risk Management , Training , Testing , Ability , Activities , Adaptability , Administrative , Application , Application Security , Auditing , Awareness , Business , Business Continuity , Business Continuity Planning , CISA , CISSP , Certifications , Change , Client , Cloud , Cloud Security , Communication ,...

  • Security Control Assessor

    2 weeks ago

    Bengaluru, Karnataka, India Quest Global Full time

    Quest Global is an organization at the forefront of innovation and one of the world's fastest growing engineering services firms with deep domain knowledge and recognized expertise in the top OEMs across seven industries. We are a twenty-five-year-old company on a journey to becoming a centenary one, driven by aspiration, hunger and humility.We are looking...

  • Information Security

    2 weeks ago

    Bengaluru, Karnataka, India Nityo Infotech Full time

    Auditing , Communication , English , Hiring , Interviewing , Leadership , Management , Newsletters , Risk Management , Risk Assessment , Testing , Ability , Activities , Adaptability , Address , Administrative , Analysis , Annual , Assessment , Associates , Auditing , Author , Availability , Awareness , Bangalore , Basis , Blogs , Bulletins , Business , CISA...

  • Information Security

    2 weeks ago

    Bengaluru, Karnataka, India Nityo Infotech Full time

    Auditing , Communication , English , Hiring , Interviewing , Leadership , Management , Newsletters , Risk Management , Risk Assessment , Testing , Ability , Activities , Adaptability , Address , Administrative , Analysis , Annual , Assessment , Associates , Auditing , Author , Availability , Awareness , Bangalore , Basis , Blogs , Bulletins , Business , CISA...

  • Data Privacy Security

    2 weeks ago

    Bengaluru, Karnataka, India Black & White Business Solutions Full time

    Job Information:IndustryIT Services***ProvinceKarnataka***CityBangalore North***Postal Code560001***CountryIndiaWe have opening for DATA PRIVACY SECURITY with one of our client, pls find the details below. Must have skills : CISSP Certified, Data Privacy and Security, Experience in privacy by design, Risk Assessor, Data Privacy Laws (GDPR, CCPA etc) Nice to...

  • Information Security

    2 weeks ago

    Bengaluru, Karnataka, India Nityo Infotech Full time

    Business Intelligence , Databases , Linux , Management , Network Security , SQL , Troubleshooting , Windows , Web Development , A , AWS , Ability , Active , Active Directory , Advantage , Ansible , Application , Application Development , Applications , Architecture , Automation , Awareness , Azure , Bamboo , Based , Business , Business Intelligence , CI , Cd...

  • Information Security Leader

    2 weeks ago

    Bengaluru, Karnataka, India Bert Labs Full time

    We are looking for a detail-oriented Information Security Leader, who leads and manages Bert Labs's overall approach to data security and information protection. Plans, analyses, designs, configures, tests, implements, and maintains Company's information security infrastructure responsive to business requirements and applicable regulations. Responsibilities...

  • Information Security Architect

    2 weeks ago

    Bengaluru, Karnataka, India Mouser Electronics Full time

    JOB DESCRIPTIONTitle: Information Security ArchitectLocation: IndiaThe Information Security Architect provides detailed recommendations for architecture and technology and reports on all matters relevant to information security. The Information Security Architect works with infrastructure teams, support teams, and development teams to develop and implement...

  • Information Security Manager

    2 weeks ago

    Bengaluru, Karnataka, India Alliance University Full time

    Job Description As the Information Security Manager, you will be responsible for developing, implementing, and managing the organization's information security program. You will work closely with internal stakeholders to identify security risks, establish policies and procedures, and implement controls to mitigate potential threats. Additionally, you will...

  • Information Security Manager

    2 weeks ago

    Bengaluru, Karnataka, India Alliance University Full time

    Job DescriptionAs the Information Security Manager, you will be responsible for developing, implementing, and managing the organization's information security program. You will work closely with internal stakeholders to identify security risks, establish policies and procedures, and implement controls to mitigate potential threats. Additionally, you will...

  • Information Security Architect

    2 weeks ago

    Bengaluru, Karnataka, India Mouser Electronics Full time

    JOB DESCRIPTION Title: Information Security Architect Location: India The Information Security Architect provides detailed recommendations for architecture and technology and reports on all matters relevant to information security. The Information Security Architect works with infrastructure teams, support teams, and development teams to develop and...