Controls Management, Specialist

Vanguard is seeking a Controls Management Specialist to join the Global Governance, Risk & Compliance (GRC) team within Enterprise Security & Fraud (ES&F). This role will help strengthen Vanguard's cybersecurity control environment through controls assurance, Continuous Controls Monitoring (CCM), automation, and data-driven risk insights. The successful candidate will assess and monitor cybersecurity controls, identify control gaps and improvement opportunities, and partner with stakeholders to enhance control effectiveness, regulatory compliance, and risk management capabilities.

Core Responsibilities:

• Perform cybersecurity control testing and assurance activities to assess control design and operating effectiveness.
• Support and enhance Continuous Controls Monitoring (CCM) capabilities through automation and analytics.
• Identify control gaps, recommend remediation actions, and track improvements.
• Develop metrics, dashboards, and reporting to provide actionable risk insights.
• Partner with security, technology, compliance, and business stakeholders to strengthen the control environment.
• Support security policy, standards, regulatory, and audit-related activities.
• Contribute to control modernization and GRC transformation initiatives.

Qualifications:

• 8+ years of experience in cybersecurity, controls assurance, audit, risk management, compliance, or related disciplines.
• Experience conducting control testing, assessments, and walkthroughs within a regulated environment.
• Strong knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27002, CIS Controls, and COBIT.
• Strong analytical, communication, and stakeholder management skills.
• Bachelor's degree or equivalent experience.

Preferences:

• Experience with Continuous Controls Monitoring (CCM), control automation, and data-driven assurance programs.
• Knowledge of AI governance, AI risk management, and AI-related regulatory requirements.
• Experience using GRC Platforms such as Archer, or similar technologies.
• Cybersecurity certifications such as CISSP, CISM, CISA, CRISC, CIA, or CPA preferred.

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.