Governance, Risk & Compliance Analyst, Specialist

Vanguard; Malvern (AR); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Hybrid work model

Competitive benefits

Job summary

Vanguard in Malvern, AR is seeking a security and fraud policy leader to serve as the technical authority for security of applications and systems. You will conduct risk assessments, develop global security standards, and advise stakeholders while interfacing with regulators.

This role supports a hybrid work model and offers growth in governance, automation, and data-driven risk insights. The position emphasizes collaboration across Compliance, Security, and Fraud teams, with strong emphasis on

Qualifications

• Five years of info security or fraud experience required.
• Undergraduate degree or equivalent; CS degree preferred.
• Professional certifications (CISSP, CISM, CompTIA, SANS, ISC2) preferred.

Responsibilities

• Serves as technical authority on security of applications and systems.
• Conducts security and fraud risk assessments and contingency planning.
• Develops and maintains global security policies and standards.
• Advises stakeholders during policy discussions and interfaces with regulators.

Skills

Security strategy

Policy execution

Stakeholder management

Communication

Cyber security

Education

Undergraduate degree

Computer Science degree preferred

Tools

GRC platforms

Automation tools

Job description

Responsibilities

• Works with Enterprise Security and Fraud subdivisions and business units as the technical authority regarding security of application and systems software, equipment, and related capabilities and performance characteristics to evaluate their effectiveness at meeting defined requirements, determining integration requirements and identifying ramifications on operations of their implementation.
• Conducts security and fraud assessments, risk analyses and assesses contingency plans for to verify existence and effectiveness of safeguards.
• Supports the development and maintenance of a portfolio of global security and fraud policies and standards. Monitors and maintains the lifecycle of the portfolio. Responsible for oversight of management and decisions related to methodology and policy for all Security and fraud functions.
• Advises key stakeholders and security policy owners during policy and standards discussions. Interfaces with clients on all inquiries related to Information and IT Security and fraud capabilities.
• Works with Compliance and Regional Security and Fraud teams to understand global regulatory requirements, develop global and regional policies and standards, and oversee implementation. Interfaces with external regulators for Information and IT Security and Fraud.
• Reviews and analyzes current and proposed policy and standards directives and IT technical issues which may affect the implementation of Information Security and Fraud across the enterprise.
• Recommends, develops, implements and coordinates new security policies, standards, controls and operating doctrine at all levels across the company. Interprets policy relating to Vanguard information security and frau functions and provides guidance, as required.
• Defines and implements automations to accelerate delivery and improve effectiveness.
• Defines and implements data-driven approaches and dashboards to predict risk issues, develop solutions, and partner with key owners and stakeholders.
• Designs, implements and supports modernized GRC process and tool capabilities.
• Participates in special projects and performs other duties as assigned.

Qualifications

• Five years related work experience, Information Security or fraud experience required.
• Undergraduate degree or equivalent combination of training and experience. Computer Science degree preferred.
• In-depth knowledge of relevant frameworks and standards (i.e., NIST CSF, NIST 800-53, CIS Controls, ISO 27002) and financial services industry cyber regulations and guidelines, and considered an expert in the domain.
• Demonstrated experience with GRC solutions platform and automation capabilities.
• Excellent communication and influencing skills.
• Influence key stakeholders and security policy and control owners.
• Professional certification (CISSP, CISM, CompTIA, SANS, ISC2) preferred.

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don’t just have a mission—we’re on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients’ lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in‑person learning, collaboration, and connection. We believe our mission‑driven and highly collaborative culture is a critical enabler to support long‑term client outcomes and enrich the employee experience.