Manager, IT Security Readiness

The Vanguard Group•Scottsdale, PA

22h•Hybrid

About The Position

Responsibilities: Team Development: Hire, evaluate, and supervise team members. Provide coaching, mentorship, and training to build skills and foster growth. Performance Management: Set clear performance standards, conduct reviews, and make informed compensation decisions in alignment with HR policies. Culture & Engagement: Promote a collaborative, high-performance culture focused on security excellence. Risk Identification: Lead and conduct security assessments to evaluate the adequacy of existing controls and identify vulnerabilities, integration requirements, and emerging risks. Corrective Actions: Recommend and oversee implementation of remediation measures for identified risks. Continuous Improvement: Maintain and enhance processes for evaluating security requirements across systems, networks, and applications. Policy Alignment: Ensure security plans, risk assessments, and control techniques comply with organizational policies and regulatory requirements. Process Assurance: Validate adequacy of development, testing, and implementation processes for security initiatives. Security Solutions: Drive adoption of new security technologies and initiatives to strengthen enterprise resilience. Technical Support: Guide the team in providing technical expertise for risk assessments and secure implementation of systems and products. Stakeholder Engagement: Coordinate with IT divisions, business units, and third-party partners to assess the impact of technology changes on operations. Vendor Management: Assist in managing vendor relationships and participate in vulnerability mitigation and acceptance processes. Reporting: Oversee reporting on information security risks and communicate findings to leadership. Special Projects: Participate in enterprise-wide initiatives and other duties as assigned. Education & Experience: Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience). Minimum 5 years of relevant work experience, including 3 years in IT security or application development. Supervisory experience preferred. Certifications (Preferred): CISSP, CRISC, CCSP, GSEC, GPEN, GWPN, CEH, or equivalent security certifications. Skills & Competencies: Strong knowledge of security frameworks (e.g., NIST, ISO 27001). Expertise in vulnerability assessment tools and methodologies. Ability to lead teams and manage cross-functional initiatives. Excellent analytical, problem-solving, and communication skills. Experience assessing risk for AI/GenAI platforms, applications, and solutions. Special Factors Sponsorship Vanguard is not offering visa sponsorship for this position. About Vanguard At Vanguard, we don't just have a mission—we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best. How We Work Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.

Requirements

Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience).
Minimum 5 years of relevant work experience, including 3 years in IT security or application development.
Strong knowledge of security frameworks (e.g., NIST, ISO 27001).
Expertise in vulnerability assessment tools and methodologies.
Ability to lead teams and manage cross-functional initiatives.
Excellent analytical, problem-solving, and communication skills.
Experience assessing risk for AI/GenAI platforms, applications, and solutions.

Nice To Haves

Supervisory experience preferred.
CISSP, CRISC, CCSP, GSEC, GPEN, GWPN, CEH, or equivalent security certifications.

Responsibilities

Hire, evaluate, and supervise team members.
Provide coaching, mentorship, and training to build skills and foster growth.
Set clear performance standards, conduct reviews, and make informed compensation decisions in alignment with HR policies.
Promote a collaborative, high-performance culture focused on security excellence.
Lead and conduct security assessments to evaluate the adequacy of existing controls and identify vulnerabilities, integration requirements, and emerging risks.
Recommend and oversee implementation of remediation measures for identified risks.
Maintain and enhance processes for evaluating security requirements across systems, networks, and applications.
Ensure security plans, risk assessments, and control techniques comply with organizational policies and regulatory requirements.
Validate adequacy of development, testing, and implementation processes for security initiatives.
Drive adoption of new security technologies and initiatives to strengthen enterprise resilience.
Guide the team in providing technical expertise for risk assessments and secure implementation of systems and products.
Coordinate with IT divisions, business units, and third-party partners to assess the impact of technology changes on operations.
Assist in managing vendor relationships and participate in vulnerability mitigation and acceptance processes.
Oversee reporting on information security risks and communicate findings to leadership.
Participate in enterprise-wide initiatives and other duties as assigned.