All operating systems are vulnerable but the least vulnerable of the two would be iOS. Android is an open source iOS is not. Android sits on 75% of all devices so is more attractive to those seeking to gain from an attack.
That said if you apply all updates and apply common sense to security, i.e. don’t click on email links or go to dodgy websites you are less likely to be infected.