As mentioned above, you need to know the "why?" and be offered alternative recommendations by the auditor.

The SQL Agent is highly used and any vulnerabilities would be fixed by MS, using other tools such as the "freeware" schedule mentioned above (SQL Scheduler) might make you more vulnerable to security holes.