AI and Data Controls Management Specialist

The Vanguard Group; Malvern (Chester County); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Vanguard, based in Malvern, PA, is seeking an experienced risk and controls leader to identify, design, document, implement, and test AI and data controls across the lifecycle. You will translate governance, regulatory, privacy, and model risks into effective control activities and build monitoring programs with dashboards for leadership.

You will partner with stakeholders across the enterprise, develop risk-to-control mappings, and contribute to audits while advancing an adaptive governance

Qualifications

• Five or more years of experience in risk management, controls, compliance, audit, governance, technology risk, model risk management, data governance, or related disciplines.
• Experience designing controls, documenting control frameworks, and implementing control solutions in complex environments.
• Experience developing risk-to-control mappings, control objectives, narratives, standards, procedures, and testing methodologies.
• Hands-on experience with AI risk, model risk, data governance, data privacy, technology risk, or related governance disciplines.
• Strong knowledge of GRC frameworks like NIST AI RMF, EU AI Act, COBIT, NIST, or similar standards, and translating them into operational controls.

Responsibilities

• Lead the identification, design, documentation, implementation, and testing of AI and data controls across the lifecycle.
• Define AI and data control objectives and document control procedures for evolving governance, privacy, model, and operational risks.
• Assess governance frameworks to identify control gaps and drive remediation for stronger enterprise controls.
• Provide expert consultation on complex AI and data risk matters and collaborate with stakeholders to strengthen alignment and support audits.
• Develop and execute controls monitoring and testing programs and produce dashboards on control effectiveness and remediation progress.

Skills

Risk management

Controls design

Governance

Audit

Data governance

AI risk

Model risk management

Data privacy

Communication

Analytical thinking

Education

Bachelor's degree

Tools

Archer

ServiceNow GRC

Job description

Responsibilities

Lead the identification, design, documentation, implementation, and testing of AI and data controls across the AI and data lifecycle, translating emerging risks, governance standards, and regulatory requirements into effective and measurable control activities. Define new AI and data control objectives, develop risk-to-control mappings, and document control procedures to address evolving governance, regulatory, privacy, model, and operational risks. Assess existing AI and data governance frameworks to identify control gaps, recommend enhancements, and drive remediation efforts that strengthen enterprise control effectiveness. Provide expert consultation and analytical leadership on complex AI and data risk and control matters, partnering across stakeholders to strengthen control alignment, support audit activities, and mitigate risk. Lead the development and execution of controls monitoring and testing programs, including effectiveness assessments, attribute-level testing, and control health reporting. Develop management reporting and dashboards on AI and data control effectiveness, issue status, monitoring outcomes, and remediation progress using GRC platforms such as Archer. Build strong cross-functional relationships and translate technical AI, model, and data risk concepts into practical control requirements and guidance for business stakeholders. Educate and influence stakeholders on AI and data governance expectations, controls design principles, and emerging industry and regulatory developments including NIST AI RMF, EU AI Act, data privacy regulations, and related frameworks. Participate in special projects and perform other duties as assigned.

Required Qualifications

• Five or more years of experience in risk management, controls, compliance, audit, governance, technology risk, model risk management, data governance, or related disciplines.
• Demonstrated experience identifying risks, designing controls, documenting control frameworks, and implementing control solutions in complex business or technology environments.
• Experience developing risk-to-control mappings, control objectives, control narratives, standards, procedures, and testing methodologies.
• Hands-on experience with, or strong understanding of, AI risk, model risk, data governance, data privacy, technology risk, or related governance disciplines.
• Working knowledge of governance and control frameworks such as NIST AI RMF, EU AI Act, CDMC, COBIT, NIST, or comparable industry standards, including the ability to translate framework requirements into operational controls.
• Experience designing, documenting, assessing, or testing controls within a Governance, Risk, and Compliance (GRC) platform such as Archer, ServiceNow GRC, or similar tools.
• Strong analytical, problem-solving, and critical-thinking skills with the ability to operate effectively in ambiguous and rapidly evolving environments.
• Excellent written and verbal communication skills with demonstrated ability to influence stakeholders and clearly articulate risk and control concepts to technical and non-technical audiences.
• Bachelor's degree or an equivalent combination of training and experience.

Preferred Qualifications

• Direct experience supporting AI governance, AI risk management, model governance, or enterprise data governance programs.
• Experience developing controls for emerging technologies, including artificial intelligence, machine learning, advanced analytics, cloud platforms, or data management environments.
• Financial services, asset management, banking, insurance, or highly regulated industry experience.
• Experience supporting regulatory examinations, internal audits, or external audits.
• Certifications such as CIA, CRISC, CDPSE, CISA, CISSP, or AI governance-related credentials including IAPP AIGP.

Special Factors

Sponsorship Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission - we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience. Vanguard, one of the world's leading investment management companies, serves individual investors, institutions, employer-sponsored retirement plans, and financial professionals. We have a diverse and talented crew with a culture that promotes teamwork, along with an unwavering focus on serving our clients' best interests.