Protective Intelligence Analyst-OSINT Monitoring and Triage

Monitoring & Triage

• Manage daily alert and intake queues: vendor alerting feeds, the program’s intake channels, executive-assistant and partner referrals, and regional intelligence routing.

• Triage inbound items against the program’s established threat screening criteria; disposition items as unfounded with documented rationale or open cases for investigation.

• Provide dedicated monitoring coverage during executive travel and event windows, assessing emerging developments in real time and escalating per defined criteria.

• Maintain watchlist hygiene and help fine tune OSINT feeds to ensure reliable threat identification.

Case Management & Intelligence Production

• Maintain key protective intelligence trackers/metrics: request log, alert log, case entries, product IDs, and dashboard integrity.

• Conduct OSINT collection and analysis for protective intelligence assessments, documenting sources and findings and contributing analytic judgments to final products.

• Draft the program’s weekly intelligence summary, synthesizing alert activity, case developments, and emerging threat trends into concise, decision-ready reporting.

• Process intake acknowledgements and maintain records-handling standards for intake channels.

Team Model – Primary Focus, Universal Capability

• Triage and monitoring is the primary focus of this role, not an exclusive lane. Every Protective Intelligence Analyst trains to produce the program’s core assessment products to standard, rotates through triage and monitoring coverage, and serves as designated backup for at least one other product line, so the team carries no single points of failure.

• Cross-train teammates in triage and monitoring, maintain current proficiency in teammates’ specialties, and participate in the program’s dual-review and after-action practices.

Required Qualifications

• Bachelor’s degree in criminal justice, intelligence studies, security studies, psychology, or a related field (or equivalent experience).

• Minimum of three years of related experience in a field such as intelligence analysis, GSOC/watch operations, journalism/research, or military/law-enforcement analysis.

• Demonstrated ability to work a high-volume queue with consistency, accuracy, and documented decisions.

• Strong OSINT skills, including the ability to locate, verify, and assess the credibility of information across open sources.

• Comfort with reading concerning or threatening content professionally and escalating appropriately.

• High ethical standards and discretion when handling sensitive executive and corporate information.

• Excellent written and verbal communication skills, including the ability to brief senior leaders clearly and calmly under time pressure.

• Proven ability to think critically and assess incomplete, ambiguous, or conflicting information.

Preferred Qualifications

• Hands-on experience with threat intelligence, alerting, or case management platforms.

• Formal training or applied experience in threat assessment, targeted violence prevention, or intelligence analysis.
• ATAP membership, with active interest or progress toward obtaining the Certified Threat Manager (CTM) designation.
  

Special Factors

• Participation in an on-call rotation for after-hours escalation support as the program matures.

• Early-morning queue coverage; occasional evening and weekend surge coverage during executive travel windows.

• Occasional domestic travel (<10%).

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.