IT Risk Advisor - Internal Audit

Vanguard•Malvern, PA

3d•Hybrid

About The Position

Vanguard is hiring an IT Risk Advisor on the Technology Advisors Team within the Global Technology Audit Services Team (GTAS). The role evaluates technology-related risks and controls across Vanguard and serves as a specialized advisor to audit teams rather than directly leading audits. The advisor helps teams evaluate technology risks, understand control environments, assess emerging technologies, and develop risk-focused audit approaches. The position also contributes to AI-enabled audit innovation, including automation, analytics, and agent-based solutions that enhance audit planning and execution. The role collaborates with stakeholders across divisions to implement audit coverage strategy for critical risk topics. It provides technical direction throughout the audit lifecycle, assesses technology control adequacy, communicates risks and results, and helps develop audit team members’ technical and analytical capabilities. This is a hybrid role, and candidates must be commutable to Vanguard’s Malvern, Pennsylvania office. Vanguard is not offering visa sponsorship for this position.

Requirements

At least five years of experience in IT audit, technology risk management, or internal controls, with demonstrated experience leading audit engagements.
Bachelor’s degree in Information Technology, Computer Science, or a related discipline.
Strong understanding of IT audit methodologies, cybersecurity principles, infrastructure and application controls, and regulatory frameworks such as SOX, NIST, and ISO 27001.
Strong project management, critical thinking, and decision-making skills.
Ability to manage multiple priorities, communicate complex concepts clearly, and build effective relationships.
Skills in stakeholder management, risk analysis, audit report writing, control design, and team mentoring.

Nice To Haves

Experience in management consulting, technology consulting, risk advisory, or professional services environments.
Exposure to AI, generative AI, intelligent automation, or agent development initiatives.
Experience with Microsoft Copilot, Copilot Studio, AI agents, workflow automation, or similar emerging technologies.
Professional certification such as CIA, CISA, CISSP, or CCSP.
Proficiency in audit tools such as Optro and data analytics platforms such as Excel, Power BI, and SQL; familiarity with cloud environments such as AWS and Azure.

Responsibilities

Serve as a trusted technology risk advisor to audit teams and technology partners, providing insight on technology, cybersecurity, governance, risk, and controls grounded in Vanguard’s technology environment.
Lead technology-risk audit pre-planning and reconnaissance, evaluating prior audit results, system and infrastructure changes, emerging risks, and control design to inform engagement scope, risk focus, and audit approach.
Use AI to improve audit effectiveness, including streamlining pre-audit planning and reconnaissance and analyzing relevant technology controls, governance, and risk considerations.
Collaborate with Internal Audit’s analytics and automation team on data-driven initiatives and control automation for Business & Corporate, Finance, and SOX audit teams.
Provide technical direction across the audit lifecycle, including risk assessment, scoping and planning, risk and control development, data analysis, control evaluation and testing, and reporting.
Assess the design and operating effectiveness of technology controls.
Identify technology control gaps, emerging risks, and opportunities for improvement, and provide practical recommendations to strengthen controls and operating practices.
Communicate technology risks and audit results clearly to stakeholders at various levels and influence management to take action.
Guide audit team members by setting expectations, reviewing work quality and technology risk coverage, and providing timely, actionable feedback.
Build and maintain relationships with technology management and IT risk partners.
Contribute to special projects and additional duties as needed.