Cybersecurity Controls Assurance & CCM Specialist

Vanguard; Malvern (Chester County); On-site; USD 120,000 - 180,000; Full time

Job summary

Vanguard is seeking a Controls Management Specialist to strengthen the cybersecurity control environment through controls assurance, CCM, automation, and data‑driven risk insights.

The role will assess and monitor cybersecurity controls, identify control gaps and improvement opportunities, and partner with stakeholders to enhance control effectiveness, regulatory compliance, and risk management capabilities.

Qualifications

• 8+ years of experience in cybersecurity, controls assurance, audit, risk management, compliance, or related disciplines.
• Experience conducting control testing, assessments, and walkthroughs within a regulated environment.
• Strong knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27002, CIS Controls, and COBIT.
• Strong analytical, communication, and stakeholder management skills.
• Bachelor's degree or equivalent experience.

Responsibilities

• Perform cybersecurity control testing and assurance activities to assess control design and operating effectiveness.
• Support and enhance Continuous Controls Monitoring (CCM) capabilities through automation and analytics.
• Identify control gaps, recommend remediation actions, and track improvements.
• Develop metrics, dashboards, and reporting to provide actionable risk insights.
• Partner with security, technology, compliance, and business stakeholders to strengthen the control environment.
• Support security policy, standards, regulatory, and audit-related activities.
• Contribute to control modernization and GRC transformation initiatives.

Skills

Cybersecurity

Controls testing

Stakeholder mgmt

Communication

Education

Bachelor's degree or equivalent

Tools

Archer

Job description

Vanguard is seeking a Controls Management Specialist to strengthen the cybersecurity control environment through controls assurance, CCM, automation, and data‑driven risk insights.

The role will assess and monitor cybersecurity controls, identify control gaps and improvement opportunities, and partner with stakeholders to enhance control effectiveness, regulatory compliance, and risk management capabilities.