Senior Cybersecurity Risk & Controls Specialist

The Vanguard Group; Lees (PA); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health and wellness benefits

Hybrid work model

Job summary

Vanguard is seeking a seasoned control assurance professional to strengthen cybersecurity and technology risk governance within Enterprise Security and Fraud. You will assess control design and operation, identify deficiencies, and drive remediation with cross-functional partners.

Required experience spans regulated environments and CCM, with certifications and GRC platform exposure preferred. This role offers hybrid work in the PA area and a path to influence risk strategy.

Qualifications

• 8+ years of experience in control assurance, cybersecurity, technology risk, IT audit, compliance, risk management, or a related field.
• Experience conducting control testing, assessments, and walkthroughs within a regulated environment.
• Experience evaluating the design and operating effectiveness of technology or cybersecurity controls.
• Strong analytical, problem-solving, and stakeholder management skills.
• Ability to communicate complex risk and control concepts to technical and non-technical audiences.
• Bachelor's degree or equivalent combination of education and experience.

Responsibilities

• Perform control assurance activities to assess the design and operating effectiveness of cybersecurity, technology, and fraud-related controls.
• Identify control deficiencies, determine root causes, and recommend practical remediation actions.
• Support CCM capabilities through automation, analytics, and data-driven assurance techniques.
• Develop metrics, dashboards, and reporting to provide actionable insights into control effectiveness, coverage, and risk exposure.
• Partner with security, technology, risk, compliance, and business stakeholders to strengthen the control environment.
• Support regulatory, audit, risk assessment, and policy compliance activities.
• Contribute to control modernization and emerging risk initiatives, including AI governance.

Skills

Cybersecurity

Risk management

Control testing

Stakeholder management

Analytical thinking

Education

Bachelor's degree or equivalent combination of education and experience

Tools

Archer

ServiceNow GRC

Job description

Vanguard is seeking a seasoned control assurance professional to strengthen cybersecurity and technology risk governance within Enterprise Security and Fraud. You will assess control design and operation, identify deficiencies, and drive remediation with cross-functional partners.

Required experience spans regulated environments and CCM, with certifications and GRC platform exposure preferred. This role offers hybrid work in the PA area and a path to influence risk strategy.