The Enterprise AI & Data Governance team drives enterprise-wide governance for data and AI by defining and operationalizing policies, standards, controls, and monitoring frameworks. The team provides centralized oversight of governance adherence, controls effectiveness, and issue management, partnering across the organization to enable trusted and audit-ready use of data and AI. The AI and Data Controls Manager role supports the design, testing, and ongoing oversight of data and AI controls through execution of established monitoring frameworks, issue management processes, and governance activities. Provides expert-level guidance for control-related matters. Collaborates with business leaders to establish and strengthen a highly-effective internal control framework.
Responsibilities
- Lead the identification, design, documentation, implementation, and testing of AI and data controls across the AI and data lifecycle, translating emerging risks, governance standards, and regulatory requirements into effective and measurable control activities.
- Define new AI and data control objectives, develop risk-to-control mappings, and document control procedures to address evolving governance, regulatory, privacy, model, and operational risks.
- Assess existing AI and data governance frameworks to identify control gaps, recommend enhancements, and drive remediation efforts that strengthen enterprise control effectiveness.
- Provide expert consultation and analytical leadership on complex AI and data risk and control matters, partnering across stakeholders to strengthen control alignment, support audit activities, and mitigate risk.
- Lead the development and execution of controls monitoring and testing programs, including effectiveness assessments, attribute-level testing, and control health reporting.
- Develop management reporting and dashboards on AI and data control effectiveness, issue status, monitoring outcomes, and remediation progress using GRC platforms such as Archer.
- Build strong cross-functional relationships and translate technical AI, model, and data risk concepts into practical control requirements and guidance for business stakeholders.
- Educate and influence stakeholders on AI and data governance expectations, controls design principles, and emerging industry and regulatory developments including NIST AI RMF, EU AI Act, data privacy regulations, and related frameworks.
- Participate in special projects and perform other duties as assigned.
Required Qualifications
- Five or more years of experience in risk management, controls, compliance, audit, governance, technology risk, model risk management, data governance, or related disciplines.
- Demonstrated experience identifying risks, designing controls, documenting control frameworks, and implementing control solutions in complex business or technology environments.
- Experience developing risk-to-control mappings, control objectives, control narratives, standards, procedures, and testing methodologies.
- Hands-on experience with, or strong understanding of, AI risk, model risk, data governance, data privacy, technology risk, or related governance disciplines.
- Working knowledge of governance and control frameworks such as NIST AI RMF, EU AI Act, CDMC, COBIT, NIST, or comparable industry standards, including the ability to translate framework requirements into operational controls.
- Experience designing, documenting, assessing, or testing controls within a Governance, Risk, and Compliance (GRC) platform such as Archer, ServiceNow GRC, or similar tools.
- Strong analytical, problem-solving, and critical-thinking skills with the ability to operate effectively in ambiguous and rapidly evolving environments.
- Excellent written and verbal communication skills with demonstrated ability to influence stakeholders and clearly articulate risk and control concepts to technical and non-technical audiences.
- Bachelor's degree or an equivalent combination of training and experience.
Preferred Qualifications
- Direct experience supporting AI governance, AI risk management, model governance, or enterprise data governance programs.
- Experience developing controls for emerging technologies, including artificial intelligence, machine learning, advanced analytics, cloud platforms, or data management environments.
- Financial services, asset management, banking, insurance, or highly regulated industry experience.
- Experience supporting regulatory examinations, internal audits, or external audits.
- Certifications such as CIA, CRISC, CDPSE, CISA, CISSP, or AI governance-related credentials including IAPP AIGP.
Special Factors
Sponsorship
Vanguard is not offering visa sponsorship for this position.
About Vanguard
At Vanguard, we don't just have a mission-we're on a mission.
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.
How We Work
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.