Third Party Cybersecurity Risk Analyst

Global Risk and Security (GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions.

Within GR&S, the Enterprise Security and Fraud (ES&F) sub-division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever-changing security landscape.

Our crew are our greatest resource – by joining our team you will build collaborative long-term relationships and enjoy a suite of benefits that includes comprehensive health and wellness care, work-life balance, and an investment in your future at its core.

You will manage GR&S vendors through the full third-party lifecycle, including due diligence and selection, negotiations and onboarding, and ongoing monitoring and management. A key component of this position will be overseeing a portfolio of critical and high-risk vendors.

Join Our Team within Vanguard's Global Risk and Security (GR&S) Division

At Vanguard, our Global Risk and Security (GR&S) team is at the forefront of enabling business strategy, protecting client and Vanguard interests (e.g., assets and data), and encouraging a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice to empower leaders and crew across Vanguard to make faster, stronger, risk-informed decisions.

Why Vanguard?

We are a world-class destination for highly engaged, passionate, and diverse talent. Our crew members are our greatest resource. By joining us, you will build collaborative, long-term relationships and enjoy a suite of benefits that include comprehensive health and wellness care, work-life balance, and a strong investment in your future.

We’re Looking For:

Experience: Prior vendor oversight, vendor assessment, and third-party risk management experience. Procurement and enterprise supplier management experience is a plus.

Knowledge: Familiarity with industry-leading third-party risk management, vendor oversight, and supplier management processes.

Skills: Foundational cybersecurity and risk knowledge with a desire to build on this acumen.

Expertise: Comprehensive understanding and experience working with and/or assessing industry-leading cybersecurity, physical security, fraud, and risk management vendors, along with related toolsets and professional services firms.

Vendor Management Specialist role:

• Lead business reviews for critical and high-risk suppliers to drive improvements and minimize risk exposures.
• Identify and analyze potential risk exposures captured in third party assessments, SOC reports, control assessments, and penetration tests.
• Perform detailed analyses to support the evaluation of the financial, operational, and performance reputation of vendors, ensuring they are suitable partners for the organization.
• Oversee and supervise the ongoing financial, operational, performance, and risk health of a subset of risk and security vendors.
• Analyze data to perform comparative evaluations of vendors, ensuring Vanguard acquires the highest value and expected return for its investment in vendor contracts.
• Assists in resolving conflicts and problems that have been referred to by others and provides guidance to less seasoned crew
• Participate in special projects and perform other duties as assigned.

What it takes:

• Seven years of related work experience.
• Undergraduate degree or equivalent combination of training and experience.

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.

Provides mutual funds, ETFs, and investment management services.