Human Risk Assurance, Analyst

Global Risk and Security (GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions.

Within GR&S, the Enterprise Security and Fraud (ES&F) sub-division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever-changing security landscape.

Our crew are our greatest resource - by joining our team you will build collaborative long-term relationships and enjoy a suite of benefits that includes comprehensive health and wellness care, work-life balance, and an investment in your future at its core.

Job Description Summary:

Provides senior technical and behavioral expertise on the development and support of all activities, processes, and tools used for assessing, validating, and ensuring the Human Risk vulnerability while validating and ensuring the integrity of Vanguard processes against Information Security policies. Conducts security assessments, risk analyses, strategy, develops training and assesses contingency plans for Vanguard business process, applications, systems, networks, and websites in relation to the human risk component.

Core Responsibilities
1. Executes strategy, develops content, and acts as a resource for security and awareness programs. Implements multiple security awareness exercises targeting enterprise, division, department, and/or specific user segments.
2. Implements the security awareness program that effectively changes these behaviors so our crew members act in a secure manner, reducing the risk to our organization.
3. Executes a positive program that engages crew, to include focusing on changing behaviors both at home and at work. Encourages crew to demonstrate secure behaviors regardless of where they are or the devices they are using.
4. Maintains core Information Security training curriculums and works with the appropriate business areas to validate appropriate tool and business process awareness coverage.
5. Facilitates security education and training activities and actively coordinates actions to fulfill completion rate targets
6. Supports management in the enforcement of security policies, standards and procedures
7. Maintains a metrics framework that can effectively measure quality of project or awareness delivery and retention.
8. Prepares status reports to develop security risk analysis scenarios and response procedures
9. Assists in the execution of Department seminars and summits on emerging security topics and trends. Coordinate guest speakers and host sessions.

• Minimum three years related work experience with 2+ years of Security Awareness Program experience.
• Undergraduate degree in security focused and/or related field or equivalent combination of security training and experience.
• Preferred security certification such as Security+ at a minimum, additional certification may include ISC2 CISSP, GIAC Security, Essentials Certification (GSEC), GIAC Web App Pen Tester (GWPN), or Certified Ethical Hacker (CEH)