IT Risk Advisor - Internal Audit

Vanguard; Malvern (Chester County); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Commutable to Malvern, PA office

Job summary

Vanguard in Malvern, PA is seeking an IT Risk Advisor within the GTAS Technology Advisors Team. You will serve as a technology risk advisor, guiding audit teams on cyber, governance, risk, and controls, with a focus on AI-enabled audit innovation and automation. The role emphasizes collaboration across divisions and strong communication, judgment, and project management skills.

Hybrid work is offered; candidates must be commutable to Malvern. Sponsorship is not available.

Qualifications

• Five+ years in IT audit, technology risk management, or internal controls with audit leadership.
• Bachelor’s degree in IT, CS or related field.
• Knowledge of IT audit methodologies, cybersecurity, and regulatory frameworks (SOX, NIST, ISO 27001).
• Strong project management, critical thinking, and communication for stakeholder relations.
• Experience in stakeholder management, risk analysis, and audit reporting.

Responsibilities

• Serve as a trusted technology risk advisor to audit teams and technology partners, focusing on governance, risk, and controls.
• Lead audit pre-planning and reconnaissance to inform engagement scope and approach.
• Leverage AI to enhance pre-audit planning and analysis of technology controls.
• Collaborate with analytics and automation teams to drive data-driven control automation.
• Provide technical direction across the audit lifecycle, including scoping, planning, testing, and reporting.
• Identify control gaps and opportunities, delivering practical recommendations to strengthen controls.

Skills

IT audit

Risk management

Project management

Critical thinking

Decision making

Stakeholder management

Audit report writing

Control design

Team mentoring

Education

Bachelor’s degree in Information Technology or Computer Science

Tools

Microsoft Copilot

Copilot Studio

AI agents

Workflow automation

Job description

Job Summary:

Vanguard is hiring an IT Risk Advisor on the Technology Advisors Team within Global Technology Audit Services Team (GTAS) focused on evaluating technology-related risks and controls across Vanguard.

Rather than leading audits directly, this role functions as a specialized technology advisor, helping audit teams evaluate technology-related risks, understand control environments, assess emerging technologies, and develop risk-focused audit approaches. The position also contributes to AI-enabled audit innovation, including automation, analytics, and agent-based solutions that enhance audit planning and execution. Collaboration with stakeholder groups across divisions is key to implementing the audit coverage strategy for critical risk topics, and ideal candidates should possess strong critical thinking, project management, relationship management, influence, communication, judgment, and decision-making skills.

Responsibilities:

• Serve as a trusted technology risk advisor to audit teams and technology partners by providing insight on technology, cybersecurity, governance, risk, and controls, grounded in an understanding of Vanguard’s technology environment.
• Lead audit pre‑planning and reconnaissance activities for technology risk, including evaluating prior audit results, changes to systems and infrastructure, emerging risks, and control design to inform engagement scope, risk focus, and audit approach.
• Leverage AI to enhance audit effectiveness, including streamlining pre‑audit planning and recon work, as well as to provide analysis on appropriate technology controls, governance, and risk considerations.
• Collaborate with Internal Audit’s analytics and automation team to drive data‑driven initiatives and control automation for teams within the different domains in Internal audit such as the Business & Corporate, Finance, and SOX.
• Provide technical direction across the audit lifecycle, guiding teams through technology risk assessment, audit scoping and planning, risk and control development, data analysis, control evaluation, testing, and reporting, including assessment of the design and operating effectiveness of technology controls.
• Assess the adequacy of the technology control environment by identifying control gaps, emerging risks, and opportunities for improvement, and delivering practical, value‑added recommendations that strengthen controls and operating practices.
• Communicate technology risks and audit results clearly and effectively to stakeholders at various levels, influencing management to take action and drive improvements to the technology control environment.
• Guide audit team members by setting clear expectations, reviewing work for quality and technology risk coverage, and providing timely, actionable feedback to build technical and analytical capability.
• Build and maintain strong relationships with technology management and IT risk partners.
• Contribute to special projects and additional duties as needed.

Required Qualifications:

• Minimum of five years of experience in IT audit, technology risk management, or internal controls, with demonstrated experience leading audit engagements.
• Bachelor’s degree in Information Technology, Computer Science, or related discipline.
• Strong understanding of IT audit methodologies, cybersecurity principles, infrastructure and application controls, and regulatory frameworks (e.g., SOX, NIST, ISO 27001).
• Strong project management, critical thinking, and decision‑making skills, with the ability to manage multiple priorities and communicate complex concepts clearly while building effective relationships.
• Skills in stakeholder management, risk analysis, audit report writing, control design, and team mentoring.

Preferred Qualifications:

• Experience in management consulting, technology consulting, risk advisory, or professional services environments.
• Exposure to AI, generative AI, intelligent automation, or agent development initiatives.
• Experience with Microsoft Copilot, Copilot Studio, AI agents, workflow automation, or similar emerging technologies.
• Professional certification (e.g., CIA, CISA, CISSP, CCSP)
• Proficiency in audit tools (e.g., Optro), data analytics platforms (Excel, Power BI, SQL), and familiarity with cloud environments (AWS, Azure).

This is a hybrid role - candidates must be commutable to Vanguard’s Malvern, PA office.

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don’t just have a mission—we’re on a mission.

To work for the long‑term financial wellbeing of our clients. To lead through product and services that transform our clients’ lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in‑person learning, collaboration, and connection. We believe our mission‑driven and highly collaborative culture is a critical enabler to support long‑term client outcomes and enrich the employee experience.