IT Senior Auditor

Vanguard•Malvern, PA

20h•Hybrid

About The Position

Vanguard's Internal Audit and SOX department has an exciting opportunity for an IT Senior Auditor on our Global Technology Audit Services (GTAS) Team. In this role, you will complete risk-based audit and consulting engagements to evaluate management’s internal controls and influence senior levels of management to take action to improve the control environment. You will collaborate with collaborator groups across divisions and be instrumental in completing the audit coverage strategy for technology risks and controls for a variety of IT platforms and functions. You will have the opportunity to build strong relationships with audit and technology leaders while continuing to grow your technology acumen. Responsibilities: Perform complex work for risk-based audits and consulting engagements (including research, evaluation and analysis, testing and reporting) on topics related to risk, governance, process, technology, controls, and operating practices of assigned engagements. Communicate with various levels of management (department and client) to discuss engagement progress and results. Identify opportunities to strengthen processes and controls for related remediation efforts. Effectively build relationships with process owners and management. Participate in client discussions throughout the engagement and execute audit and consulting work, including assessment of risk and effectiveness of controls based on relevant knowledge and experience. Encourage healthy debate and collaboration among the audit team. Prepare and deliver high-quality internal work papers and client facing deliverables such as process/control narratives, flowcharts, testing documentation, conclusions, recommendations and audit report findings to be shared with the audit team and clients. Apply relevant industry acumen including best practices, established standards, and global impact considerations in order to provide recommendations to IT management. Act as a mentor to less experienced auditors by coaching on internal audit processes and methodology as well as business lines and supporting technology. Participate in special projects and department initiatives, as needed.

Requirements

Undergraduate degree or equivalent combination of training and experience.
IT degree or concentration preferred.
Minimum of three years in related industry with a minimum of 1-2 years of IT operational/internal audit, IT risk, or IT controls experience required.
AWS Cloud Practitioner is preferred.
Hybrid position requiring proximity to Malvern, PA office.

Nice To Haves

IT degree or concentration preferred.
AWS Cloud Practitioner is preferred.

Responsibilities

Perform complex work for risk-based audits and consulting engagements (including research, evaluation and analysis, testing and reporting) on topics related to risk, governance, process, technology, controls, and operating practices of assigned engagements.
Communicate with various levels of management (department and client) to discuss engagement progress and results.
Identify opportunities to strengthen processes and controls for related remediation efforts.
Effectively build relationships with process owners and management.
Participate in client discussions throughout the engagement and execute audit and consulting work, including assessment of risk and effectiveness of controls based on relevant knowledge and experience.
Encourage healthy debate and collaboration among the audit team.
Prepare and deliver high-quality internal work papers and client facing deliverables such as process/control narratives, flowcharts, testing documentation, conclusions, recommendations and audit report findings to be shared with the audit team and clients.
Apply relevant industry acumen including best practices, established standards, and global impact considerations in order to provide recommendations to IT management.
Act as a mentor to less experienced auditors by coaching on internal audit processes and methodology as well as business lines and supporting technology.
Participate in special projects and department initiatives, as needed.