Global Risk and Security (GR&S) enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions.

Within GR&S, the Enterprise Security and Fraud (ES&F) sub-division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever-changing security landscape.

In this role you will be responsible for managing and evolving Vanguard's insider threat program. This role will require you to lead a team of up to 10 insider threat investigators. In your day-to-day activities, you'll be responsible for coordinating with HR business partners and senior leaders on the topic of Vanguard's insider threat program. This includes updates on current investigations along with surveillance activities.

In this role you will:

• Hire, evaluate, and supervise insider threat crew. Provide subject matter expertise and training as necessary to develop insider threat crew. Set performance standards, reviews performance, and make informed compensation decisions in accordance with all applicable Human Resources policies and procedures.
• Manage the Insider Threat Team responsible for responding to escalated Insider threat alerts & incidents, or related security investigations. Identify real-time complex insider attack patterns and develop near real-time mitigation strategies.
• Oversee the insider threat processes, tools and measures used the by the team to monitor and detect active insider threats, potential insider risks, network security threats caused by insider threats, tools and tactics used by modern and emerging threat actors. Ensure security the operations and incident response technologies and methodologies.
• Ensure, manage, maintain, and enhance insider threat security controls (alerts, rules, policies, and signatures) for the security platforms.
• Manage insider threat modeling exercises by leveraging threat intelligence frameworks. Ensure insider threat hunts in coordination with department and divisional partners to determine gaps in existing security controls.
• Manage proper defense depth design, configurations, and best practice for preventive solutions pertaining to the insider threats for new and evolving cyber threats.
• Ensure prompt an effective resolution of findings so incidents are addressed in the most effective and efficient manner possible. Manage department support to the business on enterprise-wide security initiatives and projects.
• Act as an insider threat to test existing scenarios or mitigating controls for maturity
• Participate in special projects and perform other duties as assigned.

What it takes:

• Proven experience as insider threat investigator
• Proven experience utilizing insider threat detection tools and techniques.
• Proven ability to understand insider threat risks and mitigating strategies.
• Proven ability to detect exploitable configuration in application or systems
• Minimum of eight years related work experience. Supervisory experience preferred.
• Undergraduate degree or equivalent combination of training and experience required. Graduate degree preferred.
• Must obtain CISSP within one year of hire.

Special Factors:

Vanguard does not offer sponsorship for this position.

About Vanguard

We are Vanguard. Together, we're changing the way the world invests.

For us, investing doesn't just end in value. It starts with values. Because when you invest with courage, when you invest with clarity, and when you invest with care, you can get so much more in return. We invest with purpose - and that's how we've become a global market leader. Here, we grow by doing the right thing for the people we serve. And so can you.

We want to make success accessible to everyone. This is our opportunity. Let's make it count.

Inclusion Statement

Vanguard's continued commitment to diversity and inclusion is firmly rooted in our culture. Every decision we make to best serve our clients, crew (internally employees are referred to as crew), and communities is guided by one simple statement: "Do the right thing."

We believe that a critical aspect of doing the right thing requires building diverse, inclusive, and highly effective teams of individuals who are as unique as the clients they serve. We empower our crew to contribute their distinct strengths to achieving Vanguard's core purpose through our values.

When all crew members feel valued and included, our ability to collaborate and innovate is amplified, and we are united in delivering on Vanguard's core purpose.

Our core purpose: To take a stand for all investors, to treat them fairly, and to give them the best chance for investment success.

Future of Work

During the pandemic, we transitioned to a work from home model for the majority of our crew and we continue to interview, hire, and on-board future crew remotely.

As we have developed the path forward, we have taken a thoughtful approach that both maximizes the advantages of working remotely and the many benefits of coming together and collaborating in a shared workspace. We believe that in-person interactions among our crew are important for preserving our unique culture and advantageous for the personal development of our crew.

When our Crew return to the office, many will work in our hybrid model. A smaller proportion of our crew will operate in the Work from Home work model (for example, field sales crew); or in the Work from Office model (for example, portfolio managers).

The working model that your role falls into will be communicated to you in the interview process - please do ask if you are unsure. We encourage you to make the decision regarding your job interview and offer knowing which model your role will fall into. We will test and learn as our ways of working evolve and will continue to evaluate working models along the way.