Technical Risk Assurance Analyst within Vanguard focusing on governance, risk, compliance, and security assessments in IT. Engaging with senior leaders and managing security requirements effectively.
Responsibilities
Lead and conduct security assessments to measure the adequacy of existing information security controls
Identify potential and actual system vulnerabilities, integration requirement and ramifications, and emerging strategic security needs and recommends corrective measures
Coordinate reporting on information security risks and works with IT sub-divisions, third party partners, and business units in identifying the impact of technology implementations on IT and business unit operations
Lead and maintain the evaluation and assessment process of in determining security requirements for data systems, networks, or websites
Identify system issues and recommend technical security solutions
Coordinate and lead the adoption of new security initiatives and solutions
Lead technical support for assessments of assets, risks, and the implementation of appropriate data security procedures and products
Ensure security requirements are met during implementation
Ensure the adequacy of development, testing and implementation processes for security plans, risk assessments, products, and control techniques
Evaluate Vanguard technical acquisitions, infrastructure and development processes, and investigate complex potential or actual information security violations to ensure that adequate security measures are established and maintained, according to established policies
Lead and coordinate security assessment plans, participate in the security vulnerability mitigation and acceptance process, and assist with managing vendor relationships
Participate in special projects and perform other duties as assigned
Requirements
Minimum five years related work experience
Three years experience in IT security or application development
Undergraduate degree in related field or equivalent combination of training and experience
Preferred security certification such as ISC2 CISSP, GIAC Security, Essentials Certification (GSEC), GIAC Penetration Tester Certification (GPEN), GIAC Web App Pen Tester (GWPN), or Certified Ethical Hacker (CEH)
Vice President of Risk and Controls Operations supporting risk management across the enterprise at MUFG. Responsible for coordinating technology risk assessments and operationalizing controls.
Advisory role focusing on risk management and transformation projects at PwC. Collaborating with teams to implement governance, management strategies and lead complex programmes.
Data Governance Engineer shaping mission data governance by leading modernization efforts for national security clients. Collaborating with stakeholders to implement data management strategies.
Senior Data Governance Engineer at Booz Allen leading modernization efforts for mission data governance. Collaborating with stakeholders to implement data strategies supporting national security efforts.
Technology Coordinator at Evertec managing change processes and daily IT application operations. Requires fluency in English and strong governance experience in a hybrid role.
Manager overseeing regulatory compliance management as an SME for TD's Business Banking. Leading a team and managing governance and control programs for effective risk management.
Sustainability & Risk Intern assisting with ESG regulatory compliance and sustainability data management. Engaging with cross - functional teams in Amsterdam to promote supply chain resilience.
Head of Risk leading Wallee Group’s Risk function in a fast - growing payment company. Driving risk management aligned with business goals and regulatory compliance.
Data Quality Risk Supervisor conducting independent assessments of data quality risk frameworks at the Group. Collaborating with various stakeholders within a hybrid work environment.