AI and Data Controls Manager

Job Description Summary 

The Enterprise AI & Data Governance team drives enterprise-wide governance for data and AI by defining and operationalizing policies, standards, controls, and monitoring frameworks. The team provides centralized oversight of governance adherence, controls effectiveness, and issue management, partnering across the organization to enable trusted and audit-ready use of data and AI. 

The AI and Data Controls Manager designs, tests, and provides ongoing oversight of controls specific to AI systems and data governance — building and executing controls monitoring frameworks, managing issues, and advising business leaders on control design for AI and data risk. This is an opportunity to be part of one of the fastest-evolving risk domains in the industry, shaping how AI and data are governed at Vanguard as the space continues to evolve. This role requires direct experience with or a good understanding of AI and/or data risk domains. 

Responsibilities 

• Leads the design, implementation, and testing of AI and data controls across the AI / data lifecycle, developing and applying established frameworks and enterprise standards to strengthen control effectiveness, remediate gaps, and enable responsible, governed, and audit-ready use of AI and data. 

• Provides expert consultation and analytical leadership on complex AI and data risk and control matters, partnering across stakeholders to strengthen control alignment, support audit response activities, and drive remediation of related risk issues. 

• Leads development of management reporting on AI/data control health — including monthly dashboards, control effectiveness (OET) results, and issue status — using platforms such as Archer. 

• Builds strong cross-functional relationships, translating technical AI/data risk concepts into clear guidance for stakeholders and influencing adoption of control solutions. 

• Provides education and awareness to crew on AI and data risk/control topics and stays current on regulatory and industry developments (e.g., NIST AI RMF, EU AI Act, data privacy laws) to ensure controls remain aligned. 

• Participates in special projects and performs other duties as assigned. 

Qualifications 

• Five years of related work experience in risk management, controls, compliance, audit, or governance.  

• Hands-on experience with, or a strong understanding of, AI, model, or data risk/governance (e.g., AI/model risk management, data governance, data privacy, or technology risk), including working knowledge of relevant frameworks (e.g., NIST AI RMF, EU AI Act, CDMC, or comparable) and how they translate into control design and testing. 

• Experience designing, documenting, or testing controls within a GRC platform (e.g., Archer) — including attribute-level testing and effectiveness rating.  

• Excellent leadership, cross-functional coordination, and analytical skills, with comfort operating in ambiguity. 

• Undergraduate degree or equivalent combination of training and experience. 

Desired Certifications 

• Certifications including CIA, CRISC, CDPSE, any AI-governance-related credentials (e.g., IAPP AIGP) are advantageous.