Human Risk Management Lead

The Vanguard Group•Charlotte, PA

9d•Hybrid

About The Position

The Human Risk Management Lead manages projects and workstreams and designs, manages, and improves social engineering programs, including phishing, vishing, smishing, and other behavioral security initiatives. The role develops awareness campaigns, learning experiences, and communications using adult learning, behavioral science, and marketing techniques to encourage secure decision-making. The position analyzes employee behavior, simulation outcomes, learning effectiveness, security culture data, and program metrics to identify trends, measure impact, and recommend improvements. It develops dashboards, scorecards, reports, and presentations that turn human risk data into actionable insights for stakeholders and senior leaders. Working across business, technology, risk, compliance, legal, communications, and learning teams, the role aligns programs with enterprise priorities and communicates performance, risks, recommendations, and strategic insights. It serves as a trusted advisor on Human Risk Management, social engineering, security culture, and awareness practices, builds cross-functional relationships, and applies artificial intelligence and emerging technologies to improve program effectiveness, efficiency, learning experiences, and outcomes. This hybrid position can be based in Charlotte, North Carolina; Dallas, Texas; Scottsdale, Arizona; or Malvern, Pennsylvania. The in-office schedule is Tuesday through Thursday.

Requirements

At least 5 years of related professional experience in one or more relevant areas, such as Human Risk Management, security awareness and training, cybersecurity or risk management, communications or marketing, learning and development, behavioral science or organizational change, data analytics and reporting, or project/program management.
Experience managing projects or programs and coordinating initiatives across cross-functional teams.
Experience analyzing data and translating findings into recommendations, decisions, and measurable business outcomes.
Ability to communicate complex information clearly to technical teams, business stakeholders, and senior leaders.
Experience influencing stakeholders and building collaborative relationships across business functions.
Undergraduate degree in a related field.

Nice To Haves

Graduate degree.
Experience with simulated phishing, vishing, smishing, or social engineering programs.
Experience with security awareness or Human Risk Management programs.
Knowledge of adult learning theory or instructional design.
Experience with behavior change, culture development, or organizational change initiatives.
Experience with awareness communications, marketing campaigns, or content development.
Experience with metrics, dashboards, reporting, and data visualization.
Experience with security culture assessments or survey programs.
Vendor management or technology platform administration experience.
Background in financial services or regulated industries.
Relevant professional certifications, such as SANS Security Awareness Professional (SSAP), CompTIA Security+, CISSP, PMP, or certifications in cybersecurity, learning, communications, behavioral science, or project management.

Responsibilities

Lead Human Risk Management projects and workstreams, including planning, execution, risk management, and stakeholder coordination.
Design, manage, and continuously improve social engineering programs, including phishing, vishing, smishing, and other behavioral security initiatives.
Develop and deliver awareness campaigns, learning experiences, and communications using adult learning, behavioral science, and marketing techniques.
Analyze employee behavior, simulation outcomes, learning effectiveness, security culture data, and other program metrics to identify trends, measure impact, and recommend improvements.
Develop dashboards, scorecards, reports, and presentations that translate human risk data into actionable insights for stakeholders and senior leaders.
Partner with business, technology, risk, compliance, legal, communications, and learning teams to align Human Risk Management programs with enterprise priorities.
Communicate program performance, risks, recommendations, and strategic insights to technical teams, business partners, and leadership.
Serve as a trusted advisor on Human Risk Management, social engineering, security culture, and awareness best practices.
Build cross-functional relationships and influence decisions to advance shared security and business outcomes.
Apply artificial intelligence and emerging technologies to improve program effectiveness, operational efficiency, learning experiences, and Human Risk Management outcomes.