IT Risk and Controls Analyst

Vanguard Group   •  

Malvern, PA

Industry: Accounting, Finance & Insurance


Less than 5 years

Posted 79 days ago

This job is no longer available.

  • Duties and Responsibilities:

    1. Provides assistance for IT control-related matters. Collaborates with internal team and technology partners to create, sustain, and strengthen IT’s internal control framework through control identification, design, implementation, and testing.

    2. Assists Control Analyst II and Control Analyst III with design, implementation, testing and ongoing monitoring of key controls across the division.

    3. Provides consultation, facilitation and analytical support to ensure internal controls are properly aligned and implemented to ensure flawless service and compliance with all business partner expectations. Provides guidance and support to management, process, and control owners on responsibilities.

    4. Provides consulting to IT on internal and external audit activities and results as well as risk mitigation initiatives in response to audit findings.

    5. Educates and influences business partners on control design and effectiveness and recommends actions to increase effectiveness of those controls based on testing assessments.

    6. Develops effective working relationships throughout the subdivision & division. Collaborates with the department and management sharing best practices regarding key controls to influence and effectively communicate control solutions to all appropriate parties. Provides guidance, training and motivation necessary to create control awareness, ownership and accountability to IT crew.

    7. Consults with Enterprise Risk Management, Information Security, Internal Audit and external Audit, Corporate Compliance, Legal and other appropriate parties sharing expertise and knowledge to strengthen the IT control environment.

    8. Participates in special projects and performs other related activities as assigned.


    • Undergraduate degree or equivalent experience is required with emphasis in Information Technology and / or Auditing-Risk Managementpreferred.
    • Minimum three years industry experience.
    • Entry level to Intermediate level knowledge of internal control theory and practices, and IT Audit Techniques.
    • Entry level to Intermediate level knowledge in designing /evaluating information technology controls preferred. Experience as an IT Auditor is a plus. Experience working in Vanguard’s Internal Audit or Risk Groups is a plus.
    • Excellent oral and written communication skills. Excellent presentation skills to all levels of personnel. Strong attention to detail.
    • Consulting skills in negotiation, influencing, and problem solving coupled with flexibility and sound business judgment.
    • Solid analytical skills and understanding of processes, technology and operational concepts.
    • Ability to work under tight time constraints and adapt quickly to changing priorities.
  • Additional Comments – In this position you will have an opportunity to:
  • Provide assistance for IT and securityrisk and control related matters with a focus in cybersecurity, physical security, logical access, and in general information security.
  • Provide analytical support to ensure internal controls are properly aligned and implemented to ensure flawless service and compliance with all business partner expectations, policies, external requirements, and industry best practices. Provide guidance, influence, and support to management, process, and control owners on control design and operating effectiveness needs.
  • Support various projects. Projects and activities may include: Assessments supporting the lead and senior risk and control analysts. Special compliance assurance engagements in the areas of SOC1/SOC2 and cybersecurity requirements.
  • Support management in the design, implementation, and/or performance of a controls testing program, including the use of data analytics or quantitative methods.
  • Implement and execute team level or leadership reports.
  • Use quantitative techniques with testing or risk analysis.
  • Vanguard is not offering visa sponsorship for this position