Cloud Security Engineering Manager

Lead a high-performing Cloud Security Posture Management (CSPM) team responsible for strengthening Vanguard's cloud security posture across a multi-cloud environment. This role partners closely with engineering, architecture, DevSecOps, and security teams to identify, prioritize, and remediate cloud security risks while enabling secure innovation at scale. The Manager will drive security automation, AI-enabled capabilities, governance controls, and continuous improvement initiatives that protect Vanguard's technology platforms and clients. Success in this role is measured by improved security outcomes, reduced cloud risk exposure, scalable security controls, and strong collaboration across technology teams.ResponsibilitiesLead, mentor, and develop a high-performing Cloud Security Posture Management team.Oversee cloud security configuration monitoring and risk reduction across AWS, Azure, and/or GCP environments.Drive adoption and optimization of Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platform (CNAPP) capabilities.Collaborate with Platform Engineering, DevSecOps, Security Operations, and Architecture teams to improve cloud security controls and governance.Advance shift-left security practices by embedding security controls into development and deployment workflows.Leverage automation and AI-driven capabilities to improve threat detection, prioritization, and remediation processes.Establish and monitor remediation service level agreements (SLAs), security guardrails, and enforcement controls.Oversee review and resolution of security findings, false positives, and risk acceptance requests.Develop and report key performance indicators (KPIs), metrics, and objectives that measure program effectiveness.Partner with engineering teams to improve visibility, coverage, and effectiveness of cloud security tooling.Ensure alignment with security standards, risk management requirements, and audit expectations.Drive continuous improvement initiatives to enhance operational efficiency and security outcomes.Required QualificationsExperience leading security engineering, cloud security, cloud infrastructure, or cybersecurity teams.Experience building, coaching, and developing high-performing technical teams.Hands-on experience with one or more major cloud platforms, including AWS, Azure, or Google Cloud Platform (GCP).Strong understanding of cloud security principles, risk management, and security controls.Experience with Cloud Security Posture Management (CSPM), Cloud-Native Application Protection Platforms (CNAPP), or related cloud security technologies.Knowledge of CI/CD pipelines and secure software development practices.Strong analytical, problem-solving, and risk assessment skills.Ability to influence and collaborate effectively across multiple technical and business stakeholder groups.Strong written and verbal communication skills.Preferred QualificationsExperience with Wiz, Prisma Cloud, Aqua Security, CrowdStrike, Qualys, Tenable, Nessus, or similar security platforms.Experience with exposure management and risk aggregation tools such as Brinqa, Kenna Security, Vulcan Cyber, Dazz, or Avalor.Knowledge of Kubernetes and container security.Experience performing or facilitating threat modeling activities.Experience leveraging AI tools or AI-enabled capabilities within security operations or engineering functions.Experience leading structured process improvement initiatives.Experience supporting audit, compliance, or risk management programs.Demonstrated commitment to continuous learning and professional development.What it Takes (Qualifications)Minimum of 5 years related work experience required, including experience in cloud security engineering or general cloud engineeringUndergraduate degree in a related field or the equivalent combination of training and experienceExcellent leadership and team management skills, with a track record of building and leading high-performing teams.Experience with AWS, Azure, or GCP – with a strong understanding of cloud security principlesSuperb analytical and problem-solving skills, with the ability to assess and mitigate complex security risksUnderstanding of CI/CD pipelinesExcellent communication and collaboration skills, with the ability to influence stakeholders multiple levels upCritical SkillsCloud Security EngineeringCloud Security Posture Management (CSPM)Cloud-Native Application Protection Platform (CNAPP)AWS SecurityAzure SecurityGoogle Cloud Platform (GCP)Security AutomationDevSecOpsCI/CD SecurityVulnerability ManagementRisk Assessment and MitigationSecurity Governance and ControlsAI-Enabled Security OperationsTeam Leadership and CoachingStakeholder ManagementCloud Security, AWS, Microsoft Azure, Google Cloud Platform (GCP), CSPM, CNAPP, DevSecOps, CI/CD, Security Engineering, Vulnerability Management, Security Automation, Cloud Governance, Risk Management, Security Operations, Threat Modeling, Kubernetes, Container Security, Wiz, Prisma Cloud, Aqua Security, CrowdStrike, Qualys, Tenable, Nessus, Brinqa, Kenna Security, Vulcan Cyber, Dazz, Avalor, Leadership, Coaching, Continuous ImprovementSpecial FactorsSponsorshipVanguard is not offering visa sponsorship for this position.About VanguardAt Vanguard, we don't just have a mission—we're on a mission.To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.How We WorkVanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.SummaryLocation: Malvern, PA; Charlotte, NC; Dallas/Ft. Worth, TXType: Full time