Take the lead in building and overseeing the information security function for a growing, diversified financial services group operating across multiple brands and business lines. As the first Chief Information Security Officer, you will define the security strategy, establish the program, and take direct ownership of critical security decisions and incident response.
Compensation
Competitive compensation package.
Responsibilities
Define and own the information security strategy, roadmap, and budget across all brands and business units within the group.
Report security posture, emerging threats, key risks, and trends to group leadership through monthly briefings and actionable risk registers.
Lead incident response from detection and triage through containment, eradication, recovery, and post-incident reviews.
Coordinate incident response with legal counsel, forensic specialists, insurers, and regulators, maintaining up-to-date response procedures and conducting tabletop exercises.
Establish and maintain cloud security standards, particularly across AWS environments, and oversee identity and access management, including SSO, MFA, least-privilege access, administrative redundancy, and short-lived credentials.
Define fraud prevention strategy across real-time payment channels, own real-time decisioning, and lead platform and capability builds to protect client and Vanguard interests.
Locations (2)
Malvern, Pennsylvania, United States
Melbourne, Victoria, Australia
Responsibilities
Define fraud prevention strategy across real-time payment channels, including risk appetite and control coverage
Design and manage fraud rules, decision logic, and detection strategies within real-time decisioning platforms
Drive enhancements and implementation of fraud rules engines and decisioning platforms in partnership with engineering
Monitor and improve fraud detection, false positives, and client friction through ongoing control tuning and performance management
Use analytics and model insights to identify trends, refine strategies, and improve detection effectiveness
Requirements
Undergraduate degree or equivalent combination of training and experience
Penetration Tester supporting the DenSecure team through security service delivery and enhancement, focusing on manual, hands-on-keyboard testing.
Compensation
The salary range for this position is $90,000 - $135,000. In addition to base pay, you may be eligible to participate in our performance-based incentive compensation or sales commission plans.
Responsibilities
Communicate testing approach, methodology, scope, findings, reports, and other relevant information to clients in a professional manner in both written and spoken form
Write penetration test reports and other documents in a professional tone and for the appropriate audience
Perform a variety of security assessments, including internal network, external network, and social engineering to include phishing, vishing, and possibly physical testing
Maintain knowledge of latest tactics, techniques, and procedures for testing during engagements and maintenance of client security posture
Functions as a technical expert who provides tactical planning, team management, threat emulation, and stakeholder communication, within a fast paced technical and cybersecurity proactive and reactive environment.
Compensation
Salary Range: $127,500 - $138,224
Responsibilities
Threat emulation and attack simulation
Assist the design and deployment of offensive tools and techniques, including social engineering, security monitoring evasion, and custom tools for network exploitation
Ensure operations are conducted in a manner that mimics both known and emerging threats to test security readiness effectively
Regularly update attack techniques to emulate the latest cyber adversaries and align with real-world tactics, techniques, and procedures (TTPs)
Develop and enforce guidelines and rules of engagement tailored to each operation, balancing realism with safety to avoid system disruptions
Lead and manage the Training and Awareness Team’s Human Risk Management program, driving threat intelligence integration, simulation design, and adaptive training initiatives.
Compensation
The pay range for this position is between $120,000.00 - $160,000.00
Responsibilities
Lead the Training and Awareness Team, setting strategy and priorities
Collect, analyze, and translate cyber threat intelligence into actionable training content
Design and manage realistic social engineering simulations
Collaborate with SOC, CTI, Incident Response, and DLP teams to align risk signals
Develop and deliver threat-informed briefings and KPI reports
Seeking remote US or Mexico-based hacking professionals focused on red teaming to run engagements including network, web, physical, and social engineering attacks.
Locations (2)
United States
Mexico
Responsibilities
Running red teaming engagements, starting with research
Profiling organizations
Defining attack objectives and crafting attack tree graphs
Performing operations based on planning to achieve attack objectives (network, web apps, physical, social engineering)