Technical Risk Assurance Analyst

The Vanguard Group • Malvern, PA

79d • Hybrid

About The Position

As a Technical Risk Assurance Analyst at Vanguard, you will lead security assessments, taking ownership of evaluating security controls across applications, networks, and architectures. You will identify vulnerabilities and emerging threats, recommending actionable solutions that strengthen our defenses. Your role will involve partnering with IT leaders, business units, and third-party vendors to assess technology risks and influence the secure adoption of new initiatives. You will define and champion security standards for data systems and web platforms, driving the adoption of cutting-edge security practices across the organization. Additionally, you will provide technical guidance during development and deployment phases to ensure security requirements are met without compromising agility. You will validate security plans, risk assessments, and control techniques to maintain compliance and resilience, oversee vulnerability mitigation strategies, and vendor security assessments to protect our ecosystem. You will also contribute to strategic initiatives and emerging security programs that push the boundaries of risk assurance.

Requirements

• 5+ years in IT security or application development.
• At least 3 years focused on cybersecurity.
• Bachelor's degree in a related field or equivalent experience.

Nice To Haves

• Certifications: ISC² CISSP, GIAC GSEC, GPEN, GWPN, CEH, CRISC.

Responsibilities

• Lead Security Assessments: Evaluate security controls across applications, networks, and architectures.
• Identify vulnerabilities and emerging threats, and recommend actionable solutions.
• Drive Risk Reporting & Collaboration: Partner with IT leaders, business units, and third-party vendors to assess technology risks.
• Shape Security Requirements: Define and champion security standards for data systems and web platforms.
• Enable Secure Implementations: Provide technical guidance during development and deployment phases.
• Assure Processes & Compliance: Validate security plans, risk assessments, and control techniques.
• Lead Vendor & Vulnerability Management: Oversee vulnerability mitigation strategies and vendor security assessments.
• Innovate Through Special Projects: Contribute to strategic initiatives and emerging security programs.

What This Job Offers

• Job Type: Full-time
• Industry: Securities, Commodity Contracts, and Other Financial Investments and Related Activities
• Education Level: Bachelor's degree