Senior Specialist, Control Assurance

Global Risk and Security (GR&S) at Vanguard enables business strategy protects client and Vanguard interests (e.g. assets and data) and stewards a strong risk culture. Our teams leverage enterprise-wide insights deep expertise and trusted advice so that across Vanguard leaders and crew drive faster stronger risk-informed decisions.

Key Responsibilities

• Perform control assurance activities to assess the design and operating effectiveness of cybersecurity technology and fraud-related controls.

• Identify control deficiencies determine root causes and recommend practical remediation actions.

• Support the development and enhancement of Continuous Controls Monitoring (CCM) capabilities through automation analytics and data-driven assurance techniques.

• Develop metrics dashboards and reporting to provide actionable insights into control effectiveness coverage and risk exposure.

• Partner with security technology risk compliance and business stakeholders to strengthen the control environment.

• Support regulatory audit risk assessment and policy compliance activities.

• Contribute to control modernization assurance transformation and emerging risk initiatives including AI governance and cybersecurity assurance.

Required Qualifications

• 8 years of experience in control assurance cybersecurity technology risk IT audit compliance risk management or a related field.

• Experience conducting control testing assessments and walkthroughs within a regulated environment.

• Experience evaluating the design and operating effectiveness of technology or cybersecurity controls.

• Strong analytical problem-solving and stakeholder management skills.

• Ability to communicate complex risk and control concepts to technical and non-technical audiences.

• Bachelors degree or equivalent combination of education and experience.

Preferred Qualifications

• Experience with Continuous Controls Monitoring (CCM) control automation or data-driven assurance programs.

• Knowledge of cybersecurity frameworks such as NIST ISO 27001/27002 CIS Controls COBIT or similar.

• Experience with GRC platforms such as Archer ServiceNow GRC or similar technologies.

• Knowledge of AI governance AI risk management and emerging technology risks.

• Experience developing assurance metrics dashboards and reporting.

• Professional certifications such as CISSP CISA CRISC CISM CIA or equivalent.

Differentiating Capabilities

• Strong judgment and decision-making skills when evaluating control effectiveness and risk.

• Ability to identify opportunities for automation and continuous monitoring.

• Skilled at building relationships influencing stakeholders and driving remediation outcomes.

• Curiosity and interest in emerging areas such as AI governance cyber resilience and technology risk.

Special Factors

Sponsorship

About Vanguard

At Vanguard we dont just have a missionwere on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members designed to capture the benefits of enhanced flexibility while enabling in-person learning collaboration and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.