GRC Policy Architect — Cybersecurity & Compliance

Vanguard; Malvern (Chester County); On-site; USD 110,000 - 160,000; Full time

Job summary

Vanguard is seeking a Governance, Risk & Compliance Analyst, Specialist to redesign and manage cybersecurity policies and standards that support GRC modernization. You’ll translate regulatory and business requirements into clear policy language, ensure alignment with enterprise governance, and partner with stakeholders to strengthen compliance.

As a key member of Vanguard’s Global Enterprise Security’s GRC and Strategic Operations team, you will develop, monitor, and automate enterprise-wide

Qualifications

• Five years of information security or fraud experience required.
• Undergraduate degree or equivalent experience; Computer Science preferred.
• Strong knowledge of NIST CSF/800-53, CIS Controls, ISO 27002.
• Experience with GRC solutions and automation capabilities.
• Excellent communication and influencing skills.

Responsibilities

• Redesign, maintain and manage cybersecurity policies and standards.
• Translate regulatory and business requirements into plain policy language.
• Assess global regulatory requirements and coordinate policy implementations.
• Advise stakeholders on policy ownership and controls.
• Define automations to accelerate policy delivery and improve effectiveness.
• Develop data-driven dashboards to predict risk and drive solutions.

Skills

InfoSec experience

GRC platforms

Policy communication

Stakeholder influence

Framework knowledge

Certification preferred

Education

Undergraduate degree

Tools

GRC software

Job description

Vanguard is seeking a Governance, Risk & Compliance Analyst, Specialist to redesign and manage cybersecurity policies and standards that support GRC modernization. You’ll translate regulatory and business requirements into clear policy language, ensure alignment with enterprise governance, and partner with stakeholders to strengthen compliance.

As a key member of Vanguard’s Global Enterprise Security’s GRC and Strategic Operations team, you will develop, monitor, and automate enterprise-wide