Management network on same vswitch as vm traffic?

Looking over how our Vsphere environment was configured, and I noticed that they have the management network on the same vswitch as virtual machine traffic. That vswitch currently has 2 NICs connected.

I know that configuration isn't recommended, I'm wondering if I should change it, and what the best route is to change it?

Move the management traffic to a new vswitch, or move the vm traffic to a new vswitch? I do have 2 more physical nic's, so I can add another vswitch with redundancy.

Thanks for any suggestions.

Kevin