Controls Management, Specialist

Vanguard • Malvern, PA

9d • Hybrid

About The Position

At Vanguard, we don't just have a mission—we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best. Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience. Vanguard, one of the world's leading investment management companies, serves individual investors, institutions, employer-sponsored retirement plans, and financial professionals. We have a diverse and talented crew with a culture that promotes teamwork, along with an unwavering focus on serving our clients' best interests.

Requirements

• 8+ years of experience in cybersecurity, controls assurance, audit, risk management, compliance, or related disciplines.
• Experience conducting control testing, assessments, and walkthroughs within a regulated environment.
• Strong knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27002, CIS Controls, and COBIT.
• Strong analytical, communication, and stakeholder management skills.
• Bachelor's degree or equivalent experience.

Nice To Haves

• Experience with Continuous Controls Monitoring (CCM), control automation, and data-driven assurance programs.
• Knowledge of AI governance, AI risk management, and AI-related regulatory requirements.
• Experience using GRC Platforms such as Archer, or similar technologies.
• Cybersecurity certifications such as CISSP, CISM, CISA, CRISC, CIA, or CPA preferred.

Responsibilities

• Perform cybersecurity control testing and assurance activities to assess control design and operating effectiveness.
• Support and enhance Continuous Controls Monitoring (CCM) capabilities through automation and analytics.
• Identify control gaps, recommend remediation actions, and track improvements.
• Develop metrics, dashboards, and reporting to provide actionable risk insights.
• Partner with security, technology, compliance, and business stakeholders to strengthen the control environment.
• Support security policy, standards, regulatory, and audit-related activities.
• Contribute to control modernization and GRC transformation initiatives.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior