Controls Assurance, Specialist

Global Risk and Security (GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions.

Within GR&S, the Enterprise Security and Fraud (ES&F) sub-division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever-changing security landscape.

• • Lead the planning, execution, and documentation of DET and OET for Enterprise Security and Fraud controls.
  • Evaluate the design, implementation, and performance of cyber security controls across domains such as Identity & Access Management, Network Security, Cloud Security, Vulnerability Management, Logging & Monitoring, and more.
  • Identify control weaknesses and partner with control owner to define and track remediation actions.
  • Support audit readiness and interact with 2nd and 3rd line on control topics.
  • Produce clear, actionable assurance reports, dashboards, and insights for senior stakeholders.
  • Provide guidance, training, and subject-matter expertise on cyber control testing and assurance practices.
  • Stay current on cyber security trends, frameworks, and regulatory expectations to enhance our testing approach and methodologies.

• • 8+ years of experience in Cyber Security, IT Risk, Internal Audit, Technology Assurance, or related fields.
  • Experience of control assurance activities within financial services preferred.
  • Strong understanding of cyber security controls, frameworks, and control testing methodologies (DET/OET).
  • Ability to translate complex technical findings into clear business insights.
  • Excellent communication, stakeholder management, and reporting skills.
  • Bachelor's degree or equivalent experience required; advanced degree preferred