Senior Technical Program Manager, Zero Trust & Cryptographic Resilience

Vanguard•Malvern, PA

1d•Hybrid

About The Position

The Senior Technical Program Manager will lead end-to-end delivery of Vanguard’s Enterprise Zero Trust portfolio, coordinating multiple technical workstreams and ensuring that scope and priorities align with business objectives and measurable value. The role maintains the integrated roadmap, milestones, dependencies, risks, and outcomes across Adaptive Access, JIT Privileged Access, PKI, Post-Quantum Cryptography, and API Security initiatives. The position establishes executive governance, including steering committees, working groups, and executive reviews; prepares reporting, funding recommendations, and decision requests; and resolves cross-functional obstacles. It aligns teams across Identity, Cloud Security, Endpoint Security, Infrastructure, Application Security, Architecture, Engineering, Risk, Compliance, and Operations, while managing dependencies across organizations and vendors and building consensus without relying on direct authority. The role owns program planning, forecasting, funding, resource allocation, and business case management, and tracks delivery against investment and workforce plans. It defines KPIs, OKRs, adoption metrics, and risk-reduction measures to demonstrate security outcomes. It also coordinates communications, readiness, training, and adoption of security controls and operating models while working to minimize user and developer friction. More broadly, the position manages technology programs or major workstreams, monitors industry and regulatory conditions, communicates progress and priorities to stakeholders, drives change-management plans, maintains compliance and audit controls, and performs special projects and other assigned duties. Vanguard’s hybrid working model is intended to combine flexibility with in-person learning, collaboration, and connection.

Requirements

10+ years of experience in program or portfolio management within cybersecurity, IAM, or enterprise technology.
Demonstrated experience running large, cross-functional security programs with multiple technical workstreams.
Strong understanding of identity security principles.
Proven ability to communicate complex initiatives in clear, executive-level language.
Undergraduate degree in a related field, such as Computer Science or Engineering.

Nice To Haves

Graduate degree preferred.

Responsibilities

Manage technology-related programs or major technical workstreams, aligning project scope with business priorities and measuring business value for prioritization.
Maintain awareness of financial services industry forces, competition, trends, and regulatory environments to inform program approaches and align strategies with company objectives and market conditions.
Communicate requirements, priorities, progress, and results to stakeholders, leaders, team members, management, and department partners; submit regular status reports.
Develop and execute change-management and communication plans.
Build stakeholder relationships, foster effective internal and external communication, and drive decisions aligned with overarching goals.
Mitigate risk and maintain control, compliance, audit, and legal requirements on technology projects.
Own end-to-end delivery of the Enterprise Zero Trust portfolio across all workstreams.
Maintain the integrated program roadmap, milestones, dependencies, risks, and outcomes.
Drive execution across Adaptive Access, JIT Privileged Access, PKI, Post-Quantum Cryptography, and API Security initiatives.
Establish and lead steering committees, working groups, and executive reviews; prepare executive reporting, status updates, risk information, funding recommendations, and decision requests.
Escalate and resolve cross-functional delivery obstacles.
Align priorities across Identity, Cloud Security, Endpoint Security, Infrastructure, Application Security, Architecture, Engineering, Risk, Compliance, and Operations.
Manage dependencies spanning multiple organizations and vendors, and build consensus without direct authority.
Own program planning, forecasting, funding, resource allocation, and business case management; track delivery against approved investment strategy and workforce plans.
Define KPIs, OKRs, adoption metrics, and risk-reduction measures, ensuring the program demonstrates measurable security outcomes.
Coordinate communications, readiness, training, and adoption activities; drive enterprise adoption of security controls and operating models while minimizing user and developer friction.
Participate in special projects and perform other duties as assigned.