Senior Specialist, Control Assurance

Global Risk and Security (GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions.

Key Responsibilities

• Perform control assurance activities to assess the design and operating effectiveness of cybersecurity, technology, and fraud-related controls.

• Identify control deficiencies, determine root causes, and recommend practical remediation actions.

• Support the development and enhancement of Continuous Controls Monitoring (CCM) capabilities through automation, analytics, and data-driven assurance techniques.

• Develop metrics, dashboards, and reporting to provide actionable insights into control effectiveness, coverage, and risk exposure.

• Partner with security, technology, risk, compliance, and business stakeholders to strengthen the control environment.

• Support regulatory, audit, risk assessment, and policy compliance activities.

• Contribute to control modernization, assurance transformation, and emerging risk initiatives, including AI governance and cybersecurity assurance.

Required Qualifications

• 8+ years of experience in control assurance, cybersecurity, technology risk, IT audit, compliance, risk management, or a related field.

• Experience conducting control testing, assessments, and walkthroughs within a regulated environment.

• Experience evaluating the design and operating effectiveness of technology or cybersecurity controls.

• Strong analytical, problem-solving, and stakeholder management skills.

• Ability to communicate complex risk and control concepts to technical and non-technical audiences.

• Bachelor's degree or equivalent combination of education and experience.

Preferred Qualifications

• Experience with Continuous Controls Monitoring (CCM), control automation, or data-driven assurance programs.

• Knowledge of cybersecurity frameworks such as NIST, ISO 27001/27002, CIS Controls, COBIT, or similar.

• Experience with GRC platforms such as Archer, ServiceNow GRC, or similar technologies.

• Knowledge of AI governance, AI risk management, and emerging technology risks.

• Experience developing assurance metrics, dashboards, and reporting.

• Professional certifications such as CISSP, CISA, CRISC, CISM, CIA, or equivalent.

Differentiating Capabilities

• Strong judgment and decision-making skills when evaluating control effectiveness and risk.

• Ability to identify opportunities for automation and continuous monitoring.

• Skilled at building relationships, influencing stakeholders, and driving remediation outcomes.

• Curiosity and interest in emerging areas such as AI governance, cyber resilience, and technology risk.

Special Factors

Sponsorship

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.