Human Risk Management Lead

This hybrid role (in office Tues-Wed-Thurs) can be based in Charlotte, NC, Dallas, TX, Scottsdale, AZ, or Malvern, PA.

Responsibilities 

• Lead Human Risk Management projects and workstreams, including planning, execution, risk management, and stakeholder coordination. 

• Design, manage, and continuously improve social engineering programs, including phishing, vishing, smishing, and other behavioral security initiatives. 

• Develop and deliver awareness campaigns, learning experiences, and communications using adult learning, behavioral science, and marketing techniques to encourage secure decision-making. 

• Analyze employee behavior, simulation outcomes, learning effectiveness, security culture data, and other program metrics to identify trends, measure impact, and recommend improvements. 

• Develop dashboards, scorecards, reports, and presentations that translate human risk data into actionable insights for stakeholders and senior leaders. 

• Partner across business, technology, risk, compliance, legal, communications, and learning teams to align Human Risk Management programs with enterprise priorities.

• Communicate program performance, risks, recommendations, and strategic insights to technical teams, business partners, and leadership.
• Serve as a trusted advisor on Human Risk Management, social engineering, security culture, and awareness best practices. 

• Build cross-functional relationships and influence decisions to advance shared security and business outcomes.
• Apply artificial intelligence and emerging technologies to improve program effectiveness, operational efficiency, learning experiences, and Human Risk Management outcomes.

Qualifications 

Required 

• 5+ years of related professional experience in one or more relevant areas, such as human risk management, security awareness and training, cybersecurity or risk management, communications or marketing, learning and development, behavioral science or organizational change, data analytics and reporting, or project/program management.
• Experience managing projects or programs and coordinating initiatives across cross-functional teams.
• Experience analyzing data and translating findings into recommendations, decisions, and measurable business outcomes.
• Ability to communicate complex information clearly to technical teams, business stakeholders, and senior leaders.
• Experience influencing stakeholders and building collaborative relationships across business functions.
• Undergraduate degree in related field. Graduate degree preferred. 

Preferred 

Experience in several, but not necessarily all, of the following: 

• Simulated phishing, vishing, smishing, or social engineering programs 

• Security awareness or Human Risk Management programs 

• Adult learning theory or instructional design 

• Behavior change, culture development, or organizational change initiatives 

• Awareness communications, marketing campaigns, or content development 

• Metrics, dashboards, reporting, and data visualization 

• Security culture assessments or survey programs 

• Vendor management or technology platform administration 

• Financial services or regulated industries background 

Certifications 

Relevant professional certifications are considered a plus, including: 

• SANS Security Awareness Professional (SSAP) 

• CompTIA Security+ 

• CISSP 

• PMP  

• Other relevant certifications in cybersecurity, learning, communications, behavioral science, or project management 

Special Factors

Sponsorship

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.