Third Party Cybersecurity Risk Analyst

Global Risk and Security (GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions. Within GR&S, the Enterprise Security and Fraud (ES&F) sub-division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever-changing security landscape. Our crew are our greatest resource - by joining our team you will build collaborative long-term relationships and enjoy a suite of benefits that includes comprehensive health and wellness care, work-life balance, and an investment in your future at its core. You will manage GR&S vendors through the full third-party lifecycle, including due diligence and selection, negotiations and onboarding, and ongoing monitoring and management. A key component of this position will be overseeing a portfolio of critical and high-risk vendors. Join Our Team within Vanguard's Global Risk and Security (GR&S) Division At Vanguard, our Global Risk and Security (GR&S) team is at the forefront of enabling business strategy, protecting client and Vanguard interests (e.g., assets and data), and encouraging a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice to empower leaders and crew across Vanguard to make faster, stronger, risk-informed decisions. Why Vanguard? We are a world-class destination for highly engaged, passionate, and diverse talent. Our crew members are our greatest resource. By joining us, you will build collaborative, long-term relationships and enjoy a suite of benefits that include comprehensive health and wellness care, work-life balance, and a strong investment in your future.

We're Looking For:

Experience:

Prior vendor oversight, vendor assessment, and third-party risk management experience. Procurement and enterprise supplier management experience is a plus.

Knowledge:

Familiarity with industry-leading third-party risk management, vendor oversight, and supplier management processes.

Skills:

Foundational cybersecurity and risk knowledge with a desire to build on this acumen.

Expertise:

Comprehensive understanding and experience working with and/or assessing industry-leading cybersecurity, physical security, fraud, and risk management vendors, along with related toolsets and professional services firms.

Vendor Management Specialist role:

Lead business reviews for critical and high-risk suppliers to drive improvements and minimize risk exposures. Identify and analyze potential risk exposures captured in third party assessments, SOC reports, control assessments, and penetration tests. Perform detailed analyses to support the evaluation of the financial, operational, and performance reputation of vendors, ensuring they are suitable partners for the organization. Oversee and supervise the ongoing financial, operational, performance, and risk health of a subset of risk and security vendors. Analyze data to perform comparative evaluations of vendors, ensuring Vanguard acquires the highest value and expected return for its investment in vendor contracts. Assists in resolving conflicts and problems that have been referred to by others and provides guidance to less seasoned crew Participate in special projects and perform other duties as assigned.

What it takes:

Seven years of related work experience. Undergraduate degree or equivalent combination of training and experience. Special Factors Sponsorship Vanguard is not offering visa sponsorship for this position. About Vanguard At Vanguard, we don't just have a mission—we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best. How We Work Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience. Vanguard, one of the world's largest investment management companies, serves individual investors, institutions, employer-sponsored retirement plans, and financial professionals. We have a diverse and talented crew with a culture that promotes teamwork, along with an unwavering focus on serving our clients' best interests. This website uses "cookies" to distinguish you from other users. A cookie is a small file of letters and numbers placed on your computer or device. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site and services. The cookies are stored locally on your computer or mobile device. To accept cookies you can continue browsing as normal. Or you can go to our Privacy Policy to read more information and learn how to change your preferences.