Control Design Modernization Specialist

Control Design & Modernization Specialist

hybird malvern, pa

no assessment

Job Description

Responsibilities

Role Overview

• As part of Client's GRC Modernization Program, we are seeking experienced Control Design & Modernization Specialists to help transform and standardize the control environment across Enterprise Security & Fraud (ES&F). This role is focused on designing the future-state control framework. Successful candidates will review existing policies, standards, risk assessments, audit observations, regulatory requirements, and current controls to identify opportunities for simplification, standardization, automation, and Continuous Controls Monitoring (CCM). Working closely with control owners, risk partners, and subject matter experts, you will design actionable, measurable, and scalable controls that support Client's evolving risk, regulatory, and business needs.

Key Responsibilities

Control Assessment & Discovery

• Review policies, standards, procedures, risk assessments, audit findings, regulatory requirements, and existing control inventories.
• Assess current-state controls to identify gaps, overlaps, redundancies, and opportunities for improvement.
• Evaluate existing control frameworks against industry best practices and regulatory expectations.

Future-State Control Design

• Design and document future-state controls that are risk-based, measurable, testable, and scalable.
• Develop clear control objectives, control activities, ownership models, evidence requirements, and implementation guidance.
• Rationalize and standardize controls across multiple ES&F functions to improve consistency and effectiveness.
• Design controls with automation and Continuous Controls Monitoring (CCM) capabilities in mind.

Stakeholder Engagement

• Facilitate workshops and working sessions with security, technology, risk, compliance, audit, and business stakeholders.
• Challenge legacy approaches and drive alignment on future-state control designs.
• Build consensus across diverse stakeholder groups and ensure control designs meet business and regulatory expectations.

GRC Modernization Support

• Contribute to the development of enterprise control libraries, control standards, taxonomies, and framework mappings.
• Support broader GRC modernization initiatives focused on improving control effectiveness, reducing complexity, and enabling scalable assurance.
• Identify opportunities to leverage automation, analytics, AI, and modern GRC practices to enhance control maturity.