AI and Data Controls Management Specialist

Vanguard; Charlotte (NC); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Vanguard is seeking an Enterprise AI & Data Controls Manager in Charlotte, NC, to lead the design, testing, and ongoing oversight of AI and data controls across the lifecycle. The role translates governance standards and regulatory requirements into effective control activities and collaborates with leaders to strengthen internal controls.

Ideal candidates have 5+ years in risk management and experience in control frameworks, narratives, and testing methodologies, with strong communication and

Qualifications

• Five or more years of experience in risk management, controls, compliance, audit, governance, technology risk, model risk management, data governance, or related disciplines.
• Experience designing controls and documenting control frameworks in complex environments.
• Knowledge of AI risk, data governance, privacy, and regulatory requirements.

Responsibilities

• Lead AI and data control design, testing, and oversight across the lifecycle.
• Define control objectives and risk-to-control mappings for governance and regulatory needs.
• Assess governance frameworks to identify gaps and drive remediation.
• Provide expert consultation on AI and data risk and control matters with stakeholders.
• Lead controls monitoring programs and health reporting using GRC tools.

Skills

Risk management

Controls design

Governance frameworks

AI risk

GRC platforms

Communication

Analytical thinking

Problem solving

Education

Bachelor's degree

Tools

Archer

ServiceNow GRC

Job description

The Enterprise AI & Data Governance team drives enterprise-wide governance for data and AI by defining and operationalizing policies, standards, controls, and monitoring frameworks. The team provides centralized oversight of governance adherence, controls effectiveness, and issue management, partnering across the organization to enable trusted and audit-ready use of data and AI. The AI and Data Controls Manager role supports the design, testing, and ongoing oversight of data and AI controls through execution of established monitoring frameworks, issue management processes, and governance activities. Provides expert-level guidance for control-related matters. Collaborates with business leaders to establish and strengthen a highly-effective internal control framework.

Responsibilities

• Lead the identification, design, documentation, implementation, and testing of AI and data controls across the AI and data lifecycle, translating emerging risks, governance standards, and regulatory requirements into effective and measurable control activities.
• Define new AI and data control objectives, develop risk-to-control mappings, and document control procedures to address evolving governance, regulatory, privacy, model, and operational risks.
• Assess existing AI and data governance frameworks to identify control gaps, recommend enhancements, and drive remediation efforts that strengthen enterprise control effectiveness.
• Provide expert consultation and analytical leadership on complex AI and data risk and control matters, partnering across stakeholders to strengthen control alignment, support audit activities, and mitigate risk.
• Lead the development and execution of controls monitoring and testing programs, including effectiveness assessments, attribute-level testing, and control health reporting.
• Develop management reporting and dashboards on AI and data control effectiveness, issue status, monitoring outcomes, and remediation progress using GRC platforms such as Archer.
• Build strong cross-functional relationships and translate technical AI, model, and data risk concepts into practical control requirements and guidance for business stakeholders.
• Educate and influence stakeholders on AI and data governance expectations, controls design principles, and emerging industry and regulatory developments including NIST AI RMF, EU AI Act, data privacy regulations, and related frameworks.
• Participate in special projects and perform other duties as assigned.

Required Qualifications

• Five or more years of experience in risk management, controls, compliance, audit, governance, technology risk, model risk management, data governance, or related disciplines.
• Demonstrated experience identifying risks, designing controls, documenting control frameworks, and implementing control solutions in complex business or technology environments.
• Experience developing risk-to-control mappings, control objectives, control narratives, standards, procedures, and testing methodologies.
• Hands-on experience with, or strong understanding of, AI risk, model risk, data governance, data privacy, technology risk, or related governance disciplines.
• Working knowledge of governance and control frameworks such as NIST AI RMF, EU AI Act, CDMC, COBIT, NIST, or comparable industry standards, including the ability to translate framework requirements into operational controls.
• Experience designing, documenting, assessing, or testing controls within a Governance, Risk, and Compliance (GRC) platform such as Archer, ServiceNow GRC, or similar tools.
• Strong analytical, problem-solving, and critical-thinking skills with the ability to operate effectively in ambiguous and rapidly evolving environments.
• Excellent written and verbal communication skills with demonstrated ability to influence stakeholders and clearly articulate risk and control concepts to technical and non-technical audiences.
• Bachelor's degree or an equivalent combination of training and experience.

Preferred Qualifications

• Direct experience supporting AI governance, AI risk management, model governance, or enterprise data governance programs.
• Experience developing controls for emerging technologies, including artificial intelligence, machine learning, advanced analytics, cloud platforms, or data management environments.
• Financial services, asset management, banking, insurance, or highly regulated industry experience.
• Experience supporting regulatory examinations, internal audits, or external audits.
• Certifications such as CIA, CRISC, CDPSE, CISA, CISSP, or AI governance-related credentials including IAPP AIGP.

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.