Senior Security & Risk Controls Leader

Vanguard; Malvern (Chester County); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health and wellness benefits

Work-life balance

Investment in your future

Job summary

Vanguard’s Global Risk and Security (GR&S) in Malvern, PA is seeking a senior controls professional to strengthen cybersecurity and technology risk controls. You will test designs, assess operating effectiveness, and drive remediation with security, risk, and business teams.

The role emphasizes data-driven assurance, development of metrics and dashboards, and collaboration across regulatory, audit, and policy activities to mature Vanguard's control environment.

Qualifications

• 8+ years of experience in control assurance, cybersecurity, technology risk, IT audit, compliance, risk management, or a related field.
• Experience conducting control testing, assessments, and walkthroughs within a regulated environment.
• Experience evaluating the design and operating effectiveness of technology or cybersecurity controls.
• Strong analytical, problem-solving, and stakeholder management skills.
• Ability to communicate complex risk and control concepts to technical and non-technical audiences.
• Bachelor's degree or equivalent combination of education and experience.

Responsibilities

• Perform control assurance activities to assess the design and operating effectiveness of cybersecurity, technology, and fraud-related controls.
• Identify control deficiencies, determine root causes, and recommend practical remediation actions.
• Support the development and enhancement of Continuous Controls Monitoring (CCM) capabilities through automation, analytics, and data-driven assurance techniques.
• Develop metrics, dashboards, and reporting to provide actionable insights into control effectiveness, coverage, and risk exposure.
• Partner with security, technology, risk, compliance, and business stakeholders to strengthen the control environment.
• Support regulatory, audit, risk assessment, and policy compliance activities.
• Contribute to control modernization, assurance transformation, and emerging risk initiatives, including AI governance and cybersecurity assurance.

Skills

Control testing

Cybersecurity

IT audit

Risk management

Stakeholder management

Communication

Education

Bachelor's degree

Tools

Archer

ServiceNow GRC

Job description

Vanguard’s Global Risk and Security (GR&S) in Malvern, PA is seeking a senior controls professional to strengthen cybersecurity and technology risk controls. You will test designs, assess operating effectiveness, and drive remediation with security, risk, and business teams.

The role emphasizes data-driven assurance, development of metrics and dashboards, and collaboration across regulatory, audit, and policy activities to mature Vanguard's control environment.