Governance, Risk & Compliance Analyst, Specialist

Vanguard•Malvern, PA

1d•Hybrid

About The Position

The Governance, Risk & Compliance Analyst works with IT subdivisions and business units as a technical authority on the security of application and systems software, equipment, and related capabilities. The role evaluates whether these meet defined security requirements, determines integration requirements, and identifies effects on IT and business unit operations. The analyst supports the development and lifecycle management of a global portfolio of security policies and standards, including oversight of policy and methodology decisions across Security functions. The role advises stakeholders and policy owners, responds to client inquiries about Information and IT Security capabilities, and supports security-related RFP responses. Working with Compliance and Regional Security teams, the analyst helps interpret global regulatory requirements, develop security policies and standards, and oversee their implementation. The position also interfaces with external regulators, conducts security assessments and risk analyses, assesses contingency plans, and evaluates safeguards for Vanguard computer facilities, telecommunications capabilities, and installations. The analyst reviews policy directives and technical issues that may affect enterprise Information Security; recommends, develops, implements, and coordinates security policies, standards, procedures, and operating doctrine; and interprets policy and provides guidance as needed. The role may also participate in special projects and perform other assigned duties. Vanguard describes its work model as hybrid for the majority of crew members, combining flexibility with in-person learning, collaboration, and connection. Vanguard is not offering visa sponsorship for this position.

Requirements

Five years of related work experience.
One or more relevant certifications required, such as CISSP, CISM, CISA, CIA, or CPA.
Undergraduate degree or an equivalent combination of training and experience.
Information Security experience is preferred.
A Computer Science degree is preferred.

Nice To Haves

Information Security experience.
A Computer Science degree.

Responsibilities

Serve as a technical security authority for IT subdivisions and business units, evaluating software, equipment, capabilities, and performance against security requirements.
Determine security integration requirements and identify potential effects of implementation on IT and business operations.
Support development and maintenance of a global portfolio of security policies and standards, including oversight of its lifecycle.
Oversee management and decisions related to methodology and policy across Security functions.
Advise stakeholders and security policy owners during policy discussions.
Respond to client inquiries about Information and IT Security capabilities and support security-related RFP responses.
Work with Compliance and Regional Security teams to understand global regulatory requirements, develop global security policies and standards, and oversee implementation.
Interface with external regulators on Information and IT Security.
Conduct security assessments and risk analyses, and assess contingency plans for computer facilities, telecommunications capabilities, and installations to verify safeguards.
Review current and proposed policy directives and IT technical issues that may affect enterprise Information Security.
Recommend, develop, implement, and coordinate security policies, standards, procedures, and operating doctrine across the company.
Interpret policy relating to Vanguard information security functions and provide guidance as required.
Participate in special projects and perform other duties as assigned.