Governance, Risk & Compliance Analyst, Specialist
About The Position
The Governance, Risk & Compliance Analyst serves as a technical authority on the security of application and systems software, equipment, and related capabilities. The role evaluates whether these meet defined security requirements, determines integration requirements, and identifies effects on IT and business operations. The position supports the development, maintenance, and lifecycle oversight of Vanguard’s global security policies and standards. It advises stakeholders and policy owners, responds to client inquiries about Information and IT Security capabilities, and supports security-related RFP reviews and approvals. The analyst works with Compliance and Regional Security teams on global regulatory requirements, policy development, and implementation, and interfaces with external regulators. The role also conducts security assessments and risk analyses, evaluates contingency plans and safeguards, reviews policy directives and technical issues, and develops and coordinates security policies, standards, procedures, and operating doctrine across the company.
Requirements
- Five years of related work experience.
- Undergraduate degree or an equivalent combination of training and experience.
- One or more relevant certifications, such as CISSP, CISM, CISA, CIA, or CPA, required as per the role.
Nice To Haves
- Information Security experience preferred.
- Computer Science degree preferred.
Responsibilities
- Serve as a technical authority for IT subdivisions and business units on the security of application and systems software, equipment, and related capabilities.
- Evaluate security effectiveness against defined requirements, determine integration requirements, and identify operational ramifications of implementation.
- Support the development and maintenance of global security policies and standards and oversee their lifecycle.
- Oversee management and decisions related to methodology and policy across Security functions.
- Advise stakeholders and security policy owners during policy discussions.
- Respond to client inquiries related to Information and IT Security capabilities.
- Support review and approval of security-related RFP responses as needed.
- Work with Compliance and Regional Security teams to understand global regulatory requirements, develop global Security policies and standards, and oversee implementation.
- Interface with external regulators regarding Information and IT Security.
- Conduct security assessments and risk analyses, and assess contingency plans for computer facilities, telecommunications capabilities, and installations to verify safeguards.
- Review and analyze policy directives and IT technical issues that may affect enterprise-wide Information Security implementation.
- Recommend, develop, implement, and coordinate security policies, standards, procedures, and operating doctrine across the company.
- Interpret policy relating to Vanguard information security functions and provide guidance as required.
- Participate in special projects and perform other duties as assigned.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
