IT Risk Advisor - Internal Audit

Job Summary:

Vanguard is hiring an IT Risk Advisor on the Technology Advisors Team within Global Technology Audit Services Team (GTAS) focused on evaluating technology-related risks and controls across Vanguard.

Rather than leading audits directly, this role functions as a specialized technology advisor, helping audit teams evaluate technology-related risks, understand control environments, assess emerging technologies, and develop risk-focused audit approaches. The position also contributes to AI-enabled audit innovation, including automation, analytics, and agent-based solutions that enhance audit planning and execution. Collaboration with stakeholder groups across divisions is key to implementing the audit coverage strategy for critical risk topics, and ideal candidates should possess strong critical thinking, project management, relationship management, influence, communication, judgment, and decision-making skills.

Responsibilities:

• Serve as a trusted technology risk advisor to audit teams and technology partners by providing insight on technology, cybersecurity, governance, risk, and controls, grounded in an understanding of Vanguard’s technology environment.
• Lead audit pre‑planning and reconnaissance activities for technology risk, including evaluating prior audit results, changes to systems and infrastructure, emerging risks, and control design to inform engagement scope, risk focus, and audit approach.
• Leverage AI to enhance audit effectiveness, including streamlining pre-audit planning and recon work, as well as to provide analysis on appropriate technology controls, governance, and risk considerations.
• Collaborate with Internal Audit’s analytics and automation team to drive data‑driven initiatives and control automation for teams within the different domains in Internal audit such as the Business & Corporate, Finance, and SOX.
• Provide technical direction across the audit lifecycle, guiding teams through technology risk assessment, audit scoping and planning, risk and control development, data analysis, control evaluation, testing, and reporting, including assessment of the design and operating effectiveness of technology controls.
• Assess the adequacy of the technology control environment by identifying control gaps, emerging risks, and opportunities for improvement, and delivering practical, value‑added recommendations that strengthen controls and operating practices.
• Communicate technology risks and audit results clearly and effectively to stakeholders at various levels, influencing management to take action and drive improvements to the technology control environment.
• Guide audit team members by setting clear expectations, reviewing work for quality and technology risk coverage, and providing timely, actionable feedback to build technical and analytical capability.
• Build and maintain strong relationships with technology management and IT risk partners.
• Contribute to special projects and additional duties as needed.

Required Qualifications:

• Minimum of five years of experience in IT audit, technology risk management, or internal controls, with demonstrated experience leading audit engagements.
• Bachelor’s degree in Information Technology, Computer Science, or related discipline.
• Strong understanding of IT audit methodologies, cybersecurity principles, infrastructure and application controls, and regulatory frameworks (e.g., SOX, NIST, ISO 27001).
• Strong project management, critical thinking, and decision-making skills, with the ability to manage multiple priorities and communicate complex concepts clearly while building effective relationships.
• Skills in stakeholder management, risk analysis, audit report writing, control design, and team mentoring.

Preferred Qualifications:

• Experience in management consulting, technology consulting, risk advisory, or professional services environments.
• Exposure to AI, generative AI, intelligent automation, or agent development initiatives.
• Experience with Microsoft Copilot, Copilot Studio, AI agents, workflow automation, or similar emerging technologies.
• Professional certification (e.g., CIA, CISA, CISSP, CCSP)
• Proficiency in audit tools (e.g., Optro), data analytics platforms (Excel, Power BI, SQL), and familiarity with cloud environments (AWS, Azure).
  

This is a hybrid role - candidates must be commutable to Vanguard's Malvern, PA office.

Special Factors

Sponsorship

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.