Senior Specialist, Control Assurance

Vanguard; Malvern (Chester County); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Vanguard is seeking a Senior Control Assurance professional to lead risk-based assessments across cybersecurity, technology, and fraud controls. You will partner with stakeholders to identify deficiencies, drive remediation, and deliver actionable insights to strengthen the control environment.

In this hybrid role in Malvern, PA, you will support Continuous Controls Monitoring (CCM), automation initiatives, and emerging risk areas including AI governance and cybersecurity assurance.

Qualifications

• 8+ years of experience in control assurance, cybersecurity, technology risk, IT audit, compliance, risk management, or a related field.
• Experience conducting control testing, assessments, and walkthroughs within a regulated environment.
• Experience evaluating the design and operating effectiveness of technology or cybersecurity controls.
• Strong analytical, problem-solving, and stakeholder management skills.
• Ability to communicate complex risk and control concepts to technical and non-technical audiences.

Responsibilities

• Perform control assurance activities to assess the design and operating effectiveness of cybersecurity, technology, and fraud-related controls.
• Identify control deficiencies, determine root causes, and recommend practical remediation actions.
• Support CCM capabilities through automation, analytics, and data-driven assurance techniques.
• Develop metrics, dashboards, and reporting to provide actionable insights into control effectiveness, coverage, and risk exposure.
• Partner with security, technology, risk, compliance, and business stakeholders to strengthen the control environment.
• Support regulatory, audit, risk assessment, and policy compliance activities.
• Contribute to control modernization, assurance transformation, and emerging risk initiatives, including AI governance and cybersecurity assurance.

Skills

Control testing

Cybersecurity

IT audit

Stakeholder management

Analytical skills

Communication of risk

Education

Bachelor's degree or equivalent

Tools

Archer

ServiceNow GRC

Job description

Lead control assurance activities across Enterprise Security & Fraud, partnering with stakeholders to assess control effectiveness, drive remediation, and deliver risk-based insights that strengthen Vanguard's control environment. Support the evolution of assurance capabilities through Continuous Controls Monitoring (CCM), automation, and emerging technology risk areas, including AI governance and cybersecurity.

Global Risk and Security

(GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions.

Enterprise Security and Fraud

(ES&F) sub-division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever-changing security landscape.

Our crew are our greatest resource – by joining our team you will build collaborative long-term relationships and enjoy a suite of benefits that includes comprehensive health and wellness care, work-life balance, and an investment in your future at its core.

Key Responsibilities

• Perform control assurance activities to assess the design and operating effectiveness of cybersecurity, technology, and fraud-related controls.


• Identify control deficiencies, determine root causes, and recommend practical remediation actions.


• Support the development and enhancement of Continuous Controls Monitoring (CCM) capabilities through automation, analytics, and data-driven assurance techniques.


• Develop metrics, dashboards, and reporting to provide actionable insights into control effectiveness, coverage, and risk exposure.


• Partner with security, technology, risk, compliance, and business stakeholders to strengthen the control environment.


• Support regulatory, audit, risk assessment, and policy compliance activities.


• Contribute to control modernization, assurance transformation, and emerging risk initiatives, including AI governance and cybersecurity assurance.

Required Qualifications

• 8+ years of experience in control assurance, cybersecurity, technology risk, IT audit, compliance, risk management, or a related field.


• Experience conducting control testing, assessments, and walkthroughs within a regulated environment.


• Experience evaluating the design and operating effectiveness of technology or cybersecurity controls.


• Strong analytical, problem-solving, and stakeholder management skills.


• Ability to communicate complex risk and control concepts to technical and non-technical audiences.


• Bachelor's degree or equivalent combination of education and experience.

Preferred Qualifications

• Experience with Continuous Controls Monitoring (CCM), control automation, or data-driven assurance programs.


• Knowledge of cybersecurity frameworks such as NIST, ISO 27001/27002, CIS Controls, COBIT, or similar.


• Experience with GRC platforms such as Archer, ServiceNow GRC, or similar technologies.


• Knowledge of AI governance, AI risk management, and emerging technology risks.


• Experience developing assurance metrics, dashboards, and reporting.


• Professional certifications such as CISSP, CISA, CRISC, CISM, CIA, or equivalent.

Differentiating Capabilities

• Strong judgment and decision-making skills when evaluating control effectiveness and risk.


• Ability to identify opportunities for automation and continuous monitoring.


• Skilled at building relationships, influencing stakeholders, and driving remediation outcomes.


• Curiosity and interest in emerging areas such as AI governance, cyber resilience, and technology risk.

Special Factors

Sponsorship
Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.