Software Supply Chain Security Architect

Vanguard; Malvern (Chester County); On-site; USD 150,000 - 210,000; Full time

Job summary

Vanguard seeks a Software Supply Chain SME to act as the technical authority securing end-to-end software supply chain risk across the SDLC. You will set security standards, integrate SBOM and artifact signing controls, and lead governance while partnering with AppSec, DevSecOps, and engineering teams to reduce supply chain risk.

You will own tooling strategy for SCA and CI/CD security, drive remediation workflows, and deliver governance metrics to leadership.

Qualifications

• Minimum of five years related work experience.
• 7–10+ years in AppSec / DevSecOps / platform security.
• Hands-on experience with SCA + pipeline security.
• Certifications preferred (CISSP, CSSLP, AAISM or equivalent).

Responsibilities

• Define and own enterprise software supply chain security strategy, roadmap, and governance.
• Embed security controls across SDLC, CI/CD pipelines, and artifact repositories.
• Collaborate with AppSec, DevSecOps, and engineering teams to drive vulnerability remediation.
• Define metrics and report on supply chain risk posture, remediation effectiveness.

Skills

Python

Java

YAML

Education

Bachelor's degree

Graduate degree preferred

Job description

Vanguard seeks a Software Supply Chain SME to act as the technical authority securing end-to-end software supply chain risk across the SDLC. You will set security standards, integrate SBOM and artifact signing controls, and lead governance while partnering with AppSec, DevSecOps, and engineering teams to reduce supply chain risk.

You will own tooling strategy for SCA and CI/CD security, drive remediation workflows, and deliver governance metrics to leadership.