Risk Director, Office of the General Counsel (OGC) and Enterprise Growth

Overview

The Risk Director for the Office of the General Counsel (OGC) and Enterprise Growth plays a critical leadership role in shaping and advancing the risk management agenda for two of Vanguard's most strategically important and dynamic divisions. This role is responsible for leading the identification, assessment, mitigation, and ongoing monitoring of key strategic, operational, regulatory, and emerging risks, ensuring they are effectively managed in alignment with Vanguard's enterprise risk framework and long-term growth objectives.

As a senior leader within the Enterprise Risk Management (ERM) organization, this individual will serve as a trusted advisor to executive leadership, providing independent oversight, credible challenge, and forward-looking risk insights. The Risk Director will partner closely with senior business, legal, and compliance leaders to enable risk-informed decision-making while supporting innovation, growth, and sound governance. In addition, this role contributes to ERM leadership by helping drive departmental priorities, strengthening risk culture, and ensuring the delivery of outcomes that advance Vanguard's enterprise-wide risk management strategy.

Key Responsibilities

• People Leadership and Talent Development
  Leads, develops, and manages a team of risk professionals. Responsible for hiring, performance management, coaching, and talent development, fostering a high-performing and inclusive environment. Sets performance standards, reviews performance, and makes compensation decisions in accordance with Human Resources policies and procedures.
• Risk Governance and Council Leadership
  Leads and facilitates risk councils and governance forums for OGC and Enterprise Growth, with a focus on the effective management of top risks. Partners with senior leaders to help define risk appetite, establish key risk indicators (KRIs), and ensure appropriate escalation, transparency, and oversight.
• Enterprise and Divisional Risk Oversight
  Engages and leads risk efforts covering critical enterprise risks impacting Legal and Enterprise Growth activities. Provides credible challenge and strategic guidance to business leaders and helps design and implement mitigation strategies to manage and monitor those risks.
• Business Controls and Operational Risk Management
  Oversees and helps design business control oversight activities across multiple business lines. Identifies, measures, and monitors operational risk, providing clarity on policies, procedures, internal controls, risk management practices, and reporting mechanisms.
• Control Management and Oversight Programs
  Leads the development, implementation, and ongoing management of control management and risk mitigation programs. Makes key decisions that provide strategic direction for business controls, ensuring alignment with industry best practices, defined standards, and applicable regulatory expectations.
• Control Assessments and Effectiveness
  Owns periodic assessments of key controls across both divisions. Provides leadership to business partners on control design and effectiveness and drives strategies to increase control maturity, consistency, and resilience.
• Enterprise Growth Risk Leadership
  Provides cross-enterprise leadership on Enterprise Growth risks that span multiple divisions. Partners with leaders across Vanguard to identify emerging risks, assess impacts, and support risk-informed decision-making for growth initiatives.
• Stakeholder Engagement and Risk Culture
  Builds and maintains strong strategic relationships with senior leaders, business partners, and risk stakeholders. Champions risk awareness, ownership, and accountability, helping embed a strong, risk-smart culture across OGC, Enterprise Growth, and the broader enterprise.
• Regulatory and Industry Expertise
  Maintains expert-level knowledge of Vanguard's policies, objectives, and business model, as well as relevant industry and regulatory developments. Reviews current and emerging regulatory requirements to ensure effective controls, procedures, and oversight mechanisms are in place.

• Minimum of 10 years of related professional experience in risk management, legal, compliance, controls, or a related field; people-leadership experience strongly preferred.
• Prior second- or third-line risk experience is valuable but not required; strong understanding of enterprise risk frameworks and lines of defense is expected.
• Demonstrated ability to influence senior leaders, operate effectively in complex and evolving environments, and provide credible challenge.
• Bachelor's degree required or equivalent combination of education and experience; graduate degree preferred (e.g., JD, MBA, or relevant master's degree).