Provides advanced analysis, consulting, and governance for identity and access management risk across the enterprise, with a focus on AI agents and agentic systems. Translates emerging AI governance requirements into enforceable IAM standards. Identifies non-compliance patterns and works with technology, risk, and control partners to reduce identity-related risk.

Core Responsibilities

• Helps draft and maintain IAM policy and standards. This includes defining requirements for AI agent identities by risk tier, covering permissions, service accounts, credential management, and identity lifecycle governance. Supports the annual review process, the significant changes process, and assessment of how AI affects existing IAM standards
• Advises application owners, platform teams, and AI system owners on identity, authentication, and access risks. Applies risk-tier knowledge to recommend the right controls, such as scoped RBAC, PAM, separation of duties, vaulted credentials, and short-lived or just-in-time access. Participates in security architecture reviews and governance consulting requests
• Identifies and analyzes IAM non-compliance patterns across human, non-human, and AI agent identities. Supports issue and action plan management through remediation and closure
• Reviews and assesses IAM exceptions and risk acceptances, including those for AI-related use cases. Supports risk reviews and helps prepare audit-defensible documentation for internal audit, external assessments such as the NIST assessment, and requests for evidence (RFE) responses
• Helps develop IAM metrics, key risk indicators (KRIs), and operational data monitors for effectiveness (ODMs), including emerging measures for AI identity compliance. Prepares stakeholder reporting that gives leadership a clear view of the IAM risk landscape. Identifies ways to automate and improve governance processes.

Qualifications

• Minimum three to five years of related work experience in IAM, information security, or IT risk and compliance. Experience with IAM governance, standards, or audit support is preferred.
• Working knowledge of privileged access management, service account and non-human identity governance, credential vaulting, RBAC, and separation of duties.
• Familiarity with AI and agentic identity concepts, and with frameworks such as NIST CSF, NIST SP 800-63, or NIST AI RMF, is preferred.
• Strong analytical, documentation, and stakeholder communication skills.
• Undergraduate degree in a related field or an equivalent combination of training and experience.

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.