Lead a high-performing Cloud Security Posture Management (CSPM) team responsible for strengthening Vanguard's cloud security posture across a multi-cloud environment. This role partners closely with engineering, architecture, DevSecOps, and security teams to identify, prioritize, and remediate cloud security risks while enabling secure innovation at scale. The Manager will drive security automation, AI-enabled capabilities, governance controls, and continuous improvement initiatives that protect Vanguard's technology platforms and clients. Success in this role is measured by improved security outcomes, reduced cloud risk exposure, scalable security controls, and strong collaboration across technology teams.
Responsibilities
- Lead, mentor, and develop a high-performing Cloud Security Posture Management team.
- Oversee cloud security configuration monitoring and risk reduction across AWS, Azure, and/or GCP environments.
- Drive adoption and optimization of Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platform (CNAPP) capabilities.
- Collaborate with Platform Engineering, DevSecOps, Security Operations, and Architecture teams to improve cloud security controls and governance.
- Advance shift-left security practices by embedding security controls into development and deployment workflows.
- Leverage automation and AI-driven capabilities to improve threat detection, prioritization, and remediation processes.
- Establish and monitor remediation service level agreements (SLAs), security guardrails, and enforcement controls.
- Oversee review and resolution of security findings, false positives, and risk acceptance requests.
- Develop and report key performance indicators (KPIs), metrics, and objectives that measure program effectiveness.
- Partner with engineering teams to improve visibility, coverage, and effectiveness of cloud security tooling.
- Ensure alignment with security standards, risk management requirements, and audit expectations.
- Drive continuous improvement initiatives to enhance operational efficiency and security outcomes.
Required Qualifications
- Experience leading security engineering, cloud security, cloud infrastructure, or cybersecurity teams.
- Experience building, coaching, and developing high-performing technical teams.
- Hands-on experience with one or more major cloud platforms, including AWS, Azure, or Google Cloud Platform (GCP).
- Strong understanding of cloud security principles, risk management, and security controls.
- Experience with Cloud Security Posture Management (CSPM), Cloud-Native Application Protection Platforms (CNAPP), or related cloud security technologies.
- Knowledge of CI/CD pipelines and secure software development practices.
- Strong analytical, problem-solving, and risk assessment skills.
- Ability to influence and collaborate effectively across multiple technical and business stakeholder groups.
- Strong written and verbal communication skills.
Preferred Qualifications
- Experience with Wiz, Prisma Cloud, Aqua Security, CrowdStrike, Qualys, Tenable, Nessus, or similar security platforms.
- Experience with exposure management and risk aggregation tools such as Brinqa, Kenna Security, Vulcan Cyber, Dazz, or Avalor.
- Knowledge of Kubernetes and container security.
- Experience performing or facilitating threat modeling activities.
- Experience leveraging AI tools or AI-enabled capabilities within security operations or engineering functions.
- Experience leading structured process improvement initiatives.
- Experience supporting audit, compliance, or risk management programs.
- Demonstrated commitment to continuous learning and professional development.
What it Takes (Qualifications)
- Minimum of 5 years related work experience required, including experience in cloud security engineering or general cloud engineering
- Undergraduate degree in a related field or the equivalent combination of training and experience
- Excellent leadership and team management skills, with a track record of building and leading high-performing teams.
- Experience with AWS, Azure, or GCP – with a strong understanding of cloud security principles
- Superb analytical and problem-solving skills, with the ability to assess and mitigate complex security risks
- Understanding of CI/CD pipelines
- Excellent communication and collaboration skills, with the ability to influence stakeholders multiple levels up
Critical Skills
- Cloud Security Engineering
- Cloud Security Posture Management (CSPM)
- Cloud-Native Application Protection Platform (CNAPP)
- AWS Security
- Azure Security
- Google Cloud Platform (GCP)
- Security Automation
- DevSecOps
- CI/CD Security
- Vulnerability Management
- Risk Assessment and Mitigation
- Security Governance and Controls
- AI-Enabled Security Operations
- Team Leadership and Coaching
- Stakeholder Management
Cloud Security, AWS, Microsoft Azure, Google Cloud Platform (GCP), CSPM, CNAPP, DevSecOps, CI/CD, Security Engineering, Vulnerability Management, Security Automation, Cloud Governance, Risk Management, Security Operations, Threat Modeling, Kubernetes, Container Security, Wiz, Prisma Cloud, Aqua Security, CrowdStrike, Qualys, Tenable, Nessus, Brinqa, Kenna Security, Vulcan Cyber, Dazz, Avalor, Leadership, Coaching, Continuous Improvement
Special Factors
Sponsorship
Vanguard is not offering visa sponsorship for this position.About Vanguard
At Vanguard, we don't just have a mission—we're on a mission.
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.
How We Work
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.
Skills Required
- Experience leading security engineering, cloud security, cloud infrastructure, or cybersecurity teams
- Experience building, coaching, and developing high-performing technical teams
- Hands-on experience with AWS, Azure, or Google Cloud Platform
- Strong understanding of cloud security principles, risk management, and security controls
- Experience with CSPM, CNAPP, or related cloud security technologies
- Knowledge of CI/CD pipelines and secure software development practices
- Strong analytical, problem-solving, and risk assessment skills
- Ability to influence and collaborate across technical and business stakeholder groups
- Strong written and verbal communication skills
- Minimum of 5 years of related work experience, including cloud security engineering or general cloud engineering
- Undergraduate degree in a related field or equivalent training and experience
- Experience with Wiz, Prisma Cloud, Aqua Security, CrowdStrike, Qualys, Tenable, Nessus, or similar platforms
- Experience with exposure management and risk aggregation tools such as Brinqa, Kenna Security, Vulcan Cyber, Dazz, or Avalor
- Knowledge of Kubernetes and container security
- Experience performing or facilitating threat modeling
- Experience leveraging AI-enabled capabilities within security operations or engineering
- Experience leading structured process improvement initiatives
- Experience supporting audit, compliance, or risk management programs
Vanguard Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Vanguard and has not been reviewed or approved by Vanguard.
-
Retirement Support — Retirement support appears unusually strong through a 401(k) design that includes a match plus an additional employer contribution, which can materially lift long-term total rewards. HSA seeding and an enhanced employer match further strengthen the savings-and-benefits value of the package.
-
Wellbeing & Lifestyle Benefits — Wellbeing and lifestyle support is reinforced by a sizable annual FlexFund stipend that can be applied across many day-to-day categories such as fitness, childcare, and other personal expenses. On-site or virtual clinics and fitness options add practical health and wellness convenience.
-
Affordable Benefits — Healthcare and related benefits are positioned as comparatively affordable via heavily subsidized medical plans and broad coverage options. This affordability can offset moderate base pay for employees who place higher value on out-of-pocket cost reductions.
Vanguard Insights
What We Do
We are a community of 30 million who think – and feel – differently about investing. Together, we’re changing the way the world invests. Since our founding in 1975, helping our investors achieve their goals is our sole reason for existence. With no other parties to answer to and therefore no conflicting loyalties, we make every decision—like keeping investing costs as low as possible—with only your needs in mind. Vanguard is one of the world's largest investment companies, offering a large selection of high-quality low-cost mutual funds, ETFs, advice, and related services. Individual and institutional investors, financial professionals, and plan sponsors can benefit from the size, stability, and experience Vanguard offers. As of April 30, 2019, we managed more than $5.6 trillion in global assets. In addition, we have 189 funds in the United States and 225 funds in global markets. For Commenting Guidelines & Important information, visit here: http://vanguard.com/linkedin Vanguard Marketing Corporation, Distributor.
