Global Risk and Security(GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions.

Within GR&S, the Enterprise Security and Fraud (ES&F) sub-division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever-changing security landscape.

Our crew are our greatest resource – by joining our team you will build collaborative long-term relationships and enjoy a suite of benefits that includes comprehensive health and wellness care, work-life balance, and an investment in your future at its core.

Core Responsibilities

• Own and execute the enterprise multi-cloud IAM strategy aligned to Zero Trust and least privilege principles.
• Lead global IAM engineering teams delivering cloud access controls, automation, and secure-by-default patterns.
• Design and standardize authorization models (RBAC/ABAC/PBAC), including privileged, cross-account, third-party, and emergency access.
• Drive reduction of standing privileges through JIT access, automation, and IaC-based controls.
• Embed IAM into cloud platforms and CI/CD pipelines to improve security, consistency, and developer productivity.
• Ensure operational excellence of cloud IAM services, including incident response, KPIs, and 24x7 global support.
• Partner with Risk, Compliance, and Audit to meet regulatory and audit requirements and improve entitlement visibility.

Qualifications

• 8+ years in IAM, Cloud Security, Security Architecture, or IT within large enterprises.
• 4–6 years leading technical teams; supervisory or matrix leadership experience preferred.
• Hands-on experience designing and operating multi-cloud IAM (AWS, Azure, GCP, OCI).
• Financial services or highly regulated industry experience preferred.
• Bachelor’s degree (or equivalent experience) required; graduate degree preferred.
• Security or cloud certifications (CISSP, CISM, CCSP, AWS/Azure/GCP/OCI) preferred.

Special Factors Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.