Apply Now

Manager, Security Awareness and Learning

• Posted 9 hours ago • Updated 9 hours ago

Full Time

On-site

Fitment

Dice Job Match Score™

🛠️ Calibrating flux capacitors...

Job Details

Skills

Operational Risk
Human Resources
Policies and Procedures
Multi-factor Authentication
Customer Facing
Help Desk
Artificial Intelligence
Threat Analysis
Messaging
Management
Internal Control
Business Continuity Planning
Partnership
Continuous Improvement
FOCUS
Reporting
Stakeholder Engagement
Auditing
Regulatory Compliance
Onboarding
Information Security
Risk Management
IT Security
Application Development
Supervision
Cyber Security
Security Operations
Identity Management
Social Engineering
Physical Security
Communication
Leadership
Training
CISSP
CISM
ISACA
Security+
Learning Management
Fraud
Security Awareness
Financial Services
Finance
Collaboration

Summary

{"description": " Key Responsibilities

Program Strategy & Leadership

Own and execute the enterprise Security Awareness & Learning strategy, aligned to the organization's overall cyber, fraud, and operational risk posture.
Translate emerging threats, regulatory expectations, and industry intelligence into relevant, actionable employee education.
Lead and develop a high-performing security awareness and learning team. Develop and execute strong success metrics to measure team performance. Hires, evaluates, and supervises crew. Provides guidance and training as necessary to develop crew. Sets performance standards, reviews performance, and makes informed compensation decisions in accordance with all applicable Human Resources policies and procedures.

Security Training and Education

Support, Design, Expand and Iterate our enterprise education covering:
- Cybersecurity fundamentals and secure behaviors
- Identity and Access Management (e.g., credential protection, MFA, privileged access hygiene, access certifications)
- Physical security responsibilities (e.g., tailgating prevention, badge security, remote work considerations)
- Fraud and social engineering threats (e.g., phishing, vishing, deepfakes, insider risk indicators)
Ensure training is role-based and risk-appropriate, with enhanced content for higher-risk roles (e.g., executives, customer-facing staff, finance, technology, and help desk teams).

Continuously refresh content based on emerging risks (e.g., phishing trends, fraud patterns, AI-enabled social engineering).
Partner with Cyber Threat Intelligence and Fraud teams to ensure consistency between awareness messaging and active threat conditions.

Phishing, Social Engineering & Fraud Readiness

Oversee phishing and social engineering preparedness programs, including simulations and just-in-time education.
Continuously identifying, prioritizing, and creating multi-channel awareness campaigns to mitigate top risks and emerging threats.
Promote a security-minded culture, reinforcing employee responsibility for identifying and escalating suspicious activity.
Align employee education with fraud prevention frameworks and internal controls to reduce financial and reputational impact.

Exercises & Practical Readiness

Partner with Cybersecurity, Fraud, and Business Continuity teams to integrate awareness outcomes into tabletop and simulated exercises in partnership with the Cyber Security Operations Center and the Red Team.
Reinforce employee roles and expectations during cyber and fraud incidents, ensuring learning translates into real-world response readiness.

Measurement & Continuous Improvement

Define and track meaningful metrics beyond completion rates (e.g., behavior change, reporting rates, reduced susceptibility, improved response times).
Use data to adjust training frequency, content focus, and delivery methods.
Provide regular executive reporting on program effectiveness, trends, and risk reduction.

Governance & Stakeholder Engagement

Maintain alignment with regulatory expectations, audit requirements, and internal policy standards.
Understand and implement controls and evidence processes that provide guardrails of assurance for policy integrity.
Partner with HR and Compliance to ensure training is integrated into the employee lifecycle (onboarding, role changes, annual refresh).
Represent the organization in industry forums and peer exchanges related to security awareness and culture.

Qualifications

Required

Bachelor's degree or equivalent experience in Information Security, Risk Management, Education, or a related field
Minimum five years related work experience with three years experience in IT security or application development. Supervisory experience preferred.
Strong understanding of:
- Cyber security principles and security operations functions
- Identity and Access Management concepts
- Fraud and social engineering tactics
- Physical security responsibilities
Proven ability to influence and engage at all levels of the organization, including executives
Strong written and verbal communication skills.

Preferred

Demonstrated experience leading an enterprise security awareness or learning program, or related security leadership experience, preferably in financial services or a regulated industry
Familiarity with financial-services regulatory expectations related to security training and awareness
Certifications such as CISSP, CISM, CRISC, Security+, or equivalent
Experience with phishing simulation platforms, learning management systems, and awareness metrics

Success in This Role Looks Like

Employees clearly understand their role in protecting the organization from cyber, fraud, and physical threats
Security awareness is perceived as relevant, timely, and practical, not check-the-box
Measurable reductions in human-enabled risk
Strong alignment with financial-services and technology peers and industry best practices

Special Factors

Sponsorship
Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission-we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.", "salary_raw": null}

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 90922487
Position Id: 24191301
Posted 9 hours ago

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Malvern, Arkansas

•

Today

{"description": " Core Responsibilities 1. Manage technology-related programs or major technical workstream of a broader program. Ensures that the scope of the projects within the broader transformation or program align with business priorities and that business value is properly measured for prioritization. 2. Develops and maintains broad knowledge and awareness of Financial Services industry forces, competition, and trends to assess viability of approaches and strategies to technology-related

Full-time

Senior Technical Risk Assurance Analyst - AI

Malvern, Arkansas

•

Today

{"description": " What You'll Do Lead Advanced Security Assessments: Drive comprehensive evaluations of security controls across cloud, on-prem, and AI-powered platforms. Identify vulnerabilities and deliver actionable solutions that make an impact. Harness AI for Risk Management: Use advanced AI tools to continuously monitor, track, and predict risks. Enhance models for greater accuracy and align AI-driven insights with Vanguard's risk framework. Influence Technology Decisions: Collaborate with

Full-time

Corporate Security, Specialist

Malvern, Arkansas

•

20d ago

{"description": "The Corporate Security Specialist leads and manages the overall security and protection of the workplace including staff, contents and overall premises. This role provides expert level security administration knowledge to develop and maintain a secure access administration architecture for the organization. Responsibilities: Manages sensitive department security investigations including incidents of theft, burglary, intruders, and other threats. Leads and manages the department'

Full-time

Application Security Tech Lead

Malvern, Arkansas

•

Today

{"description": " Duties and Responsibilities: Provide technical and delivery leadership for the Application Security - DevSecOps Team, spanning API, DAST, container security, and emerging application security capabilities. Partner with individual domain leads (API, DAST, Container, etc.) to balance priorities, unblock work, and ensure consistent collaboration and execution across the team. Support the manager through execution, planning, stakeholder communication, and operational leadership;

Full-time

Search all similar jobs

Manager, Security Awareness and Learning

Dice Job Match Score™

Job Details

Skills

Summary

Similar Jobs