IT Risk Advisor - Internal Audit

The Vanguard Group•Malvern, PA

2d•Hybrid

About The Position

Vanguard is hiring an IT Risk Advisor on the Technology Advisors Team within the Global Technology Audit Services Team (GTAS). This role evaluates technology-related risks and controls across Vanguard and serves as a specialized technology advisor to audit teams rather than leading audits directly. The advisor helps teams understand technology risk and control environments, assess emerging technologies, and develop risk-focused audit approaches. The position also contributes to AI-enabled audit innovation, including automation, analytics, and agent-based solutions that improve audit planning and execution. Collaboration with stakeholders across divisions supports the audit coverage strategy for critical risk topics. This is a hybrid role, and candidates must be commutable to Vanguard’s Malvern, Pennsylvania office. Vanguard describes its mission as supporting clients’ long-term financial wellbeing and developing its people and services. Its hybrid working model is intended to balance flexibility with in-person learning, collaboration, and connection. Vanguard is not offering visa sponsorship for this position.

Requirements

At least five years of experience in IT audit, technology risk management, or internal controls, with demonstrated experience leading audit engagements.
Bachelor’s degree in Information Technology, Computer Science, or a related discipline.
Strong understanding of IT audit methodologies, cybersecurity principles, infrastructure and application controls, and regulatory frameworks such as SOX, NIST, and ISO 27001.
Strong project management, critical thinking, and decision-making skills, including the ability to manage multiple priorities.
Ability to communicate complex concepts clearly and build effective relationships.
Skills in stakeholder management, risk analysis, audit report writing, control design, and team mentoring.
Must be commutable to Vanguard’s Malvern, Pennsylvania office for this hybrid role.

Nice To Haves

Experience in management consulting, technology consulting, risk advisory, or professional services environments.
Exposure to AI, generative AI, intelligent automation, or agent development initiatives.
Experience with Microsoft Copilot, Copilot Studio, AI agents, workflow automation, or similar emerging technologies.
Professional certification such as CIA, CISA, CISSP, or CCSP.
Proficiency in audit tools such as Optro and data analytics platforms such as Excel, Power BI, and SQL; familiarity with AWS or Azure cloud environments.

Responsibilities

Serve as a trusted technology risk advisor to audit teams and technology partners, providing insight on technology, cybersecurity, governance, risk, and controls grounded in Vanguard’s technology environment.
Lead technology-risk audit pre-planning and reconnaissance, evaluating prior audit results, system and infrastructure changes, emerging risks, and control design to inform scope, risk focus, and audit approach.
Use AI to improve audit effectiveness, including streamlining pre-audit planning and reconnaissance and analyzing relevant technology controls, governance, and risks.
Collaborate with Internal Audit’s analytics and automation team on data-driven initiatives and control automation for Business & Corporate, Finance, and SOX audit teams.
Provide technical direction throughout the audit lifecycle, including technology risk assessment, scoping and planning, risk and control development, data analysis, control evaluation and testing, and reporting.
Assess the design and operating effectiveness of technology controls and identify control gaps, emerging risks, and improvement opportunities.
Deliver practical recommendations to strengthen controls and operating practices.
Communicate technology risks and audit results to stakeholders at various levels and influence management to take action.
Guide audit team members by setting expectations, reviewing work quality and technology risk coverage, and providing actionable feedback to build technical and analytical capability.
Build and maintain strong relationships with technology management and IT risk partners.
Contribute to special projects and additional duties as needed.