Vanguard

This Hybrid Role (in office Tues-Wed-Thurs) is based in Malvern, PA (HQ), Charlotte, NC or Dallas, TX.
Core Responsibilities:
<ul>
<li>Leads the technical migration from legacy endpoint DLP agents (e.g., Digital Guardian) to cloud-delivered endpoint protection platforms (e.g., Zscaler Client Connector / Zscaler Endpoint DLP), including agent coexistence strategy, policy parity mapping, and phased cutover.</li>
<li>Designs and enforces end-user notification (EUN), coaching, and justification workflows that balance control effectiveness against user friction and productivity impact.</li>
<li>Builds automation and integrations via REST APIs, SIEM/SOAR pipelines, and CI/CD to reduce manual effort in policy deployment, incident enrichment, and reporting.</li>
<li>Defines and reports program metrics — coverage, detection efficacy, false positive rate, mean time to triage, and policy drift — to security leadership.</li>
<li>Evaluates emerging data security technologies.</li>
<li>Mentors junior engineers and analysts, builds team technical depth, and leads knowledge transfer and cross-training initiatives.</li>
<li>Participates in special projects and performs other duties as assigned.</li>
</ul>
Qualifications:
Required
<ul>
<li>Minimum 8 years in information security, with at least 5 years of hands-on endpoint DLP engineering and operations.</li>
<li>Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; equivalent professional experience considered.</li>
<li>Deep hands-on expertise with Zscaler Endpoint DLP (ZDP) / Zscaler Data Protection, including Zscaler Client Connector, forwarding profiles, and endpoint policy configuration.</li>
<li>Hands-on expertise with Digital Guardian, including DGMC policy and rule authoring, agent deployment and upgrade management, control set design, and incident workflow administration.</li>
<li>Demonstrated experience leading an endpoint security agent migration or consolidation at enterprise scale.</li>
<li>4+ years of scripting and automation experience (Python, PowerShell, Shell) for endpoint policy management, reporting, and API-driven integration.</li>
<li>3+ years working with security telemetry and SIEM platforms (Elastic, Splunk, or equivalent) for endpoint DLP incident analysis and reporting.</li>
<li>Proficiency in JIRA, Confluence, ServiceNow, and Agile/Scrum delivery.</li>
</ul>
Preferred
<ul>
<li>Experience with Microsoft Purview Information Protection, sensitivity labeling, and Microsoft 365 oversharing remediation.</li>
<li>Experience implementing data controls for GenAI and LLM usage, including prompt and upload inspection.</li>
<li>Familiarity with UEBA and insider risk analytics platforms.</li>
<li>Industry certifications: CISSP, CCSP, GCFA, GCED, or vendor certifications in Zscaler (ZDTA, ZCCP-DP) or Digital Guardian.</li>
<li>Experience supporting regulatory examination and audit evidence production in a financial services or other highly regulated environment.</li>
</ul>
Competencies:
<ul>
<li>Operates with autonomy in ambiguity; translates emerging data risks into actionable control requirements.</li>
<li>Communicates technical risk clearly to non-technical and executive audiences.</li>
<li>Influences across organizational boundaries without direct authority.</li>
<li>Balances control rigor against business enablement and user experience.</li>
</ul>
Special Factors
Sponsorship
Vanguard is not offering visa sponsorship for this position.
About Vanguard
At Vanguard, we don't just have a mission—we're on a mission.
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.
How We Work
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.

Endpoint Data Loss Prevention Lead

Endpoint Data Loss Prevention Lead

This job is no longer available

Talents

Recruiters

About