GRC Security & Policy Analyst — Risk, Automation & Compliance

Vanguard; Texas; Ibrido; USD 120.000 - 170.000; Tempo pieno

Descrizione del lavoro

Vanguard is seeking a senior Information Security/Fraud professional to serve as the technical authority on security of applications and systems. The role entails risk analysis, policy governance, and collaboration with Compliance and regional teams to address global regulatory requirements.

The ideal candidate has five years of security or fraud experience, an undergraduate degree, and expertise in NIST/ISO frameworks.

Competenze

• Five years related work experience in Information Security or fraud.
• Undergraduate degree or equivalent combination of training and experience; Computer Science preferred.
• In-depth knowledge of frameworks/standards (NIST CSF, NIST 800-53, CIS Controls, ISO 27002) and financial services cyber regulations.
• Experience with GRC solutions platform and automation capabilities.
• Excellent communication and influencing skills.
• Influence key stakeholders and security policy owners.
• Professional certifications (CISSP, CISM, CompTIA, SANS, ISC2) preferred.

Mansioni

• Acts as technical authority on security of applications and systems to evaluate requirements and integration.
• Conducts security and fraud assessments, risk analyses and contingency plan reviews.
• Supports portfolio of global security and fraud policies, standards, and lifecycle management.
• Advises stakeholders during policy discussions and interfaces with clients.
• Collaborates with Compliance and regional teams on global regulatory requirements and oversees policy implementation.
• Reviews and analyzes policy directives and IT issues impacting security across the enterprise.
• Defines and implements automations to accelerate delivery and improve effectiveness.
• Develops data-driven dashboards to predict risk and partner with stakeholders.
• Supports modernized GRC processes and tool capabilities.
• Participates in special projects and other duties.

Conoscenze

Communication

Stakeholder influence

GRC platforms

Policy guidance

Security standards

Formazione

Undergraduate degree

Computer Science degree preferred

Professional certifications (CISSP, CISM, CompTIA, SANS, ISC2) preferred

Strumenti

GRC platform

Automation tools

Descrizione del lavoro

Vanguard is seeking a senior Information Security/Fraud professional to serve as the technical authority on security of applications and systems. The role entails risk analysis, policy governance, and collaboration with Compliance and regional teams to address global regulatory requirements.

The ideal candidate has five years of security or fraud experience, an undergraduate degree, and expertise in NIST/ISO frameworks.