Key Responsibilities

• Perform control assurance activities to assess the design and operating effectiveness of cybersecurity, technology, and fraud-related controls.

• Identify control deficiencies, determine root causes, and recommend practical remediation actions.

• Support the development and enhancement of Continuous Controls Monitoring (CCM) capabilities through automation, analytics, and data-driven assurance techniques.

• Develop metrics, dashboards, and reporting to provide actionable insights into control effectiveness, coverage, and risk exposure.

• Partner with security, technology, risk, compliance, and business stakeholders to strengthen the control environment.

• Support regulatory, audit, risk assessment, and policy compliance activities.

• Contribute to control modernization, assurance transformation, and emerging risk initiatives, including AI governance and cybersecurity assurance.

Required Qualifications

• 8+ years of experience in control assurance, cybersecurity, technology risk, IT audit, compliance, risk management, or a related field.

• Experience conducting control testing, assessments, and walkthroughs within a regulated environment.

• Experience evaluating the design and operating effectiveness of technology or cybersecurity controls.

• Strong analytical, problem-solving, and stakeholder management skills.

• Ability to communicate complex risk and control concepts to technical and non-technical audiences.

• Bachelor's degree or equivalent combination of education and experience.

Preferred Qualifications

• Experience with Continuous Controls Monitoring (CCM), control automation, or data-driven assurance programs.

• Knowledge of cybersecurity frameworks such as NIST, ISO 27001/27002, CIS Controls, COBIT, or similar.

• Experience with GRC platforms such as Archer, ServiceNow GRC, or similar technologies.

• Knowledge of AI governance, AI risk management, and emerging technology risks.

• Experience developing assurance metrics, dashboards, and reporting.

• Professional certifications such as CISSP, CISA, CRISC, CISM, CIA, or equivalent.

Differentiating Capabilities

• Strong judgment and decision-making skills when evaluating control effectiveness and risk.

• Ability to identify opportunities for automation and continuous monitoring.

• Skilled at building relationships, influencing stakeholders, and driving remediation outcomes.

• Curiosity and interest in emerging areas such as AI governance, cyber resilience, and technology risk.

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.