Head of Cyber Defense, Cyber Security Operations Center (CSOC)

Overview:As the Head of Cyber Defense within Vanguard’s Cyber Security Operations Center (CSOC), you will serve as a senior leader responsible for advancing and executing Vanguard’s global cyber defense strategy. The person in this role will lead a global organization accountable for end-to-end cyber defense operations—spanning threat detection, response, mitigation, and continuous improvement—across data center and multi-cloud environments (AWS, Azure, GCP).This role goes beyond operational leadership. You will act as a strategic partner and extension of the CSOC senior leadership team, shaping the future of cyber defense capabilities, strengthening organizational resiliency, and ensuring Vanguard remains ahead of an evolving threat landscape.Success in this role requires the rare ability to combine deep technical credibility, executive leadership, and enterprise influence—translating complex cyber risk into clear business outcomes while enabling the firm to operate securely at global scale.Core Responsibilities:Cyber Defense Strategy & ExecutionExecute and evolve Vanguard’s CSOC cyber defense strategy, translating enterprise priorities into actionable, measurable outcomes.Drive an intelligence-led, proactive defense model across all domains.Continuously adapt capabilities to address an evolving and complex threat landscape.Cyber Defense OperationsAccountable for end-to-end execution of integrated cyber defense capabilities, including:Threat detection, analysis, and rapid mitigationAdvanced attack analytics and forensicsIntegration with cyber threat intelligence to enable proactive defenseClose alignment with incident response, detection engineering, and platform teamsContinuous monitoring and protection across cloud, network, and enterprise systemsThese capabilities ensure continuous monitoring and mitigation of threats impacting the enterprise.Operational Excellence & Performance ManagementLead high-performing, 24x7 global operation teams with a focus on speed, accuracy, and resilience.Establish and manage key performance indicators (e.g., mitigation speed, detection effectiveness, containment outcomes).Drive continuous improvement to enhance operational efficiency and effectiveness.Ensure seamless coordination across CSOC domains to deliver unified cyber defense outcomes.Capability Maturity & Cyber Defense ModernizationAdvance Threat Mitigation capabilities toward a fully integrated, intelligence-led defense model.Drive automation and orchestration to improve scalability, speed, and consistency.Reduce complexity and technical debt while strengthening platform integration.Align capabilities to leading frameworks (e.g., NIST CSF).Cyber Modernization & InnovationAdvance cyber defense toward a fully integrated, intelligence-driven, and automated model.Drive adoption of:* Automation and orchestration* Advanced analytics and AI-enabled capabilitiesReduce complexity while strengthening platform integration and scalabilityRisk, Controls & Regulatory LeadershipMaintain a strong, defensible control environment aligned with leading frameworks (e.g., NIST CSF)Own audit readiness and remediationProvide clear, executive-level visibility into cyber risk and mitigation effectivenessEnterprise Partnership & InfluenceServe as a trusted advisor to senior stakeholders across technology, risk, and business functionsEnable secure growth by balancing risk rigor with business agilityOperate effectively in a dynamic, evolving stakeholder environmentTalent & Leadership DevelopmentBuild and sustain a high-performing, diverse cyber defense organizationDevelop future leaders and succession pipelines across all layersFoster a culture of ownership, innovation, and continuous improvementQualifications:Minimum of 12 years of experience in cybersecurity, with significant leadership in cyber defense / security operations (SOC).Undergraduate degree in Technical discipline, Computer Science or related field required. Graduate degree preferred.Certified Information Systems Security Professional (CISSP) and/ or Certified Information Security Manager (CISM).Demonstrated ownership of end-to-end cyber defense operations, including detection, response, and post-incident improvement.Proven experience leading large, complex, multi-layered technical organizations (leader-of-leaders model).Deep experience across:* Data center and enterprise security* Multi-cloud environments (AWS, Azure, GCP)Strong understanding of:* Threat intelligence integration* Detection engineering and response frameworks* Modern attack vectors and adversary tacticsDemonstrated success operating at senior leadership levels, influencing across complex organizations.Exceptional stakeholder management and executive communication skillsAbility to translate technical risk into business-relevant insights and decisions.Special FactorsSponsorshipVanguard is not offering visa sponsorship for this position.About VanguardAt Vanguard, we don't just have a mission—we're on a mission.To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.How We WorkVanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.SummaryLocation: Malvern, PAType: Full time