Cloud Security Engineering Manager

Lead a high-performing Cloud Security Posture Management (CSPM) team responsible for strengthening Vanguard's cloud security posture across a multi-cloud environment. This role partners closely with engineering, architecture, DevSecOps, and security teams to identify, prioritize, and remediate cloud security risks while enabling secure innovation at scale. The Manager will drive security automation, AI-enabled capabilities, governance controls, and continuous improvement initiatives that protect Vanguard's technology platforms and clients. Success in this role is measured by improved security outcomes, reduced cloud risk exposure, scalable security controls, and strong collaboration across technology teams.

Responsibilities

• Lead, mentor, and develop a high-performing Cloud Security Posture Management team.
• Oversee cloud security configuration monitoring and risk reduction across AWS, Azure, and/or GCP environments.
• Drive adoption and optimization of Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platform (CNAPP) capabilities.
• Collaborate with Platform Engineering, DevSecOps, Security Operations, and Architecture teams to improve cloud security controls and governance.
• Advance shift-left security practices by embedding security controls into development and deployment workflows.
• Leverage automation and AI-driven capabilities to improve threat detection, prioritization, and remediation processes.
• Establish and monitor remediation service level agreements (SLAs), security guardrails, and enforcement controls.
• Oversee review and resolution of security findings, false positives, and risk acceptance requests.
• Develop and report key performance indicators (KPIs), metrics, and objectives that measure program effectiveness.
• Partner with engineering teams to improve visibility, coverage, and effectiveness of cloud security tooling.
• Ensure alignment with security standards, risk management requirements, and audit expectations.
• Drive continuous improvement initiatives to enhance operational efficiency and security outcomes.

Required Qualifications

• Experience leading security engineering, cloud security, cloud infrastructure, or cybersecurity teams.
• Experience building, coaching, and developing high-performing technical teams.
• Hands-on experience with one or more major cloud platforms, including AWS, Azure, or Google Cloud Platform (GCP).
• Strong understanding of cloud security principles, risk management, and security controls.
• Experience with Cloud Security Posture Management (CSPM), Cloud-Native Application Protection Platforms (CNAPP), or related cloud security technologies.
• Knowledge of CI/CD pipelines and secure software development practices.
• Strong analytical, problem-solving, and risk assessment skills.
• Ability to influence and collaborate effectively across multiple technical and business stakeholder groups.
• Strong written and verbal communication skills.

Preferred Qualifications

• Experience with Wiz, Prisma Cloud, Aqua Security, CrowdStrike, Qualys, Tenable, Nessus, or similar security platforms.
• Experience with exposure management and risk aggregation tools such as Brinqa, Kenna Security, Vulcan Cyber, Dazz, or Avalor.
• Knowledge of Kubernetes and container security.
• Experience performing or facilitating threat modeling activities.
• Experience leveraging AI tools or AI-enabled capabilities within security operations or engineering functions.
• Experience leading structured process improvement initiatives.
• Experience supporting audit, compliance, or risk management programs.
• Demonstrated commitment to continuous learning and professional development.

What it Takes (Qualifications)

• Minimum of 5 years related work experience required, including experience in cloud security engineering or general cloud engineering
• Undergraduate degree in a related field or the equivalent combination of training and experience

• Excellent leadership and team management skills, with a track record of building and leading high-performing teams.
• Experience with AWS, Azure, or GCP – with a strong understanding of cloud security principles
• Superb analytical and problem-solving skills, with the ability to assess and mitigate complex security risks
• Understanding of CI/CD pipelines

• Excellent communication and collaboration skills, with the ability to influence stakeholders multiple levels up

Critical Skills

• Cloud Security Engineering
• Cloud Security Posture Management (CSPM)
• Cloud-Native Application Protection Platform (CNAPP)
• AWS Security
• Azure Security
• Google Cloud Platform (GCP)
• Security Automation
• DevSecOps
• CI/CD Security
• Vulnerability Management
• Risk Assessment and Mitigation
• Security Governance and Controls
• AI-Enabled Security Operations
• Team Leadership and Coaching
• Stakeholder Management

Cloud Security, AWS, Microsoft Azure, Google Cloud Platform (GCP), CSPM, CNAPP, DevSecOps, CI/CD, Security Engineering, Vulnerability Management, Security Automation, Cloud Governance, Risk Management, Security Operations, Threat Modeling, Kubernetes, Container Security, Wiz, Prisma Cloud, Aqua Security, CrowdStrike, Qualys, Tenable, Nessus, Brinqa, Kenna Security, Vulcan Cyber, Dazz, Avalor, Leadership, Coaching, Continuous Improvement

Special Factors

Sponsorship

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.