Internal Audit Manager

Job Description

Purpose of role

The Internal Audit Manager is a management role within Collinson’s third line of defence. The role is accountable for managing a defined portfolio of risk-based assurance and advisory activity across the Group and for supporting delivery of the Internal Audit Strategy and Annual Internal Audit Plan.

The role holder will lead complex, cross-functional and international reviews from planning through to reporting and follow-up, including anti-fraud assurance, cybersecurity and broader IT risk assurance. The role will provide robust, independent insight on governance, risk management and internal control, and translate internal audit outcomes into clear, commercially focused recommendations for management.

Where required, the Internal Audit Manager will manage and develop internal audit team members and co-sourced specialists, maintain senior stakeholder relationships, contribute to Global Audit & Risk Committee reporting and deputise for the Global Head of Internal Audit. The role will promote consistent professional standards, effective use of data and technology, and continuous improvement across the function.

Key responsibilities

As part of Collinson’s third line of defence, the Internal Audit Manager’s responsibilities include:

·   Own and manage delivery of an agreed portfolio of the risk-based Internal Audit Plan across all business areas, including but not limited to: strategic, financial, operational, technology, cybersecurity, fraud, legal and transformation risks.

·   Support the Global Head of Internal Audit in developing the Strategy and Annual Internal Audit Plans, using enterprise risk, strategy, regulatory developments and stakeholder insight and foresight to inform internal audit priorities.

·   Lead complex and high-profile internal audits and Independent Advisory Services (“IAS”) across multiple entities and jurisdictions, setting scope, approach, resource requirements, milestones and quality expectations.

·   Provide day-to-day leadership, supervision, coaching and quality review for Senior Internal Auditor(s), other team members and co-sourced specialists.

·   Allocate work and monitor portfolio delivery, budgets, dependencies and emerging issues, escalating material risks and delivery constraints promptly.

·   Build trusted, appropriately independent relationships with executives, senior management and control functions, acting as a credible adviser on governance, risk and control matters.

·   Assess the design and operating effectiveness of governance, risk management and control frameworks and form balanced, evidence-based internal audit opinions.

·   Ensure internal audit findings identify root causes, business impact and practical actions, with clear accountability and proportionate timescales.

·   Produce and review concise, high-quality reports and executive papers suitable for senior management and the Global Audit & Risk Committee.

·   Present significant findings, themes, overdue actions and emerging risks to senior stakeholders and, where required, the Global Audit & Risk Committee.

·   Manage the follow-up and validation of agreed actions, challenging slippage and escalating significant or persistent risk exposure.

·   Lead or support investigations, thematic reviews, advisory assignments and other priority work without compromising Internal Audit independence.

·   Lead anti-fraud assurance activities, including assessment of fraud risk governance, preventative and detective controls, investigation arrangements, escalation protocols and management oversight of fraud exposure.

·   Evaluate whether fraud risk assessments, monitoring, data-led detection and response arrangements are proportionate to the Group’s products, channels, customers and geographic footprint.

·   Lead and oversee cybersecurity and IT risk assurance reviews covering areas such as cyber governance, identity and access management, security operations, data protection, cloud and infrastructure resilience, third-party technology risk, incident response and disaster recovery.

·   Engage effectively with technology, information security, data and risk leaders, using specialist co-source support where required, and translate technical risk into clear business impact and executive-level assurance.

·   Drive functional improvement through utilisation of the GRC tool (Diligent), data analytics, AI, audit technology, continuous assurance and more efficient risk-based audit methods.

·   Maintain the Internal Audit methodology, quality standards and documentation expectations in line with applicable IIA Global Internal Audit Standards.

·   Support resource planning, co-source procurement and provider management, ensuring assignments are delivered to agreed scope, quality and cost.

Deputise for the Global Head of Internal Audit at management forums and stakeholder meetings, when required.

Core Accountabilities and Decision-Making

·   Accountable for the quality, timeliness and professional judgement applied across the assigned internal audit portfolio.

·   Authority to agree audit scope, testing programme and reporting approach within the approved Internal Audit Plan and methodology.

·   Expected to challenge senior stakeholders constructively, determine when issues require escalation and recommend proportionate management action.

·   Responsible for directing assigned internal and external resources and reviewing their work before formal issue.

Contributes to functional strategy, risk assessment, workforce planning, budget management and Global Audit & Risk Committee reporting.

Knowledge, skills and experience required

·   Substantial progressive internal audit, risk or assurance experience, including responsibility for leading complex internal audits and managing concurrent assignments across business, financial, operational, technology and change risks in a large or international organisation.

·   A relevant professional qualification such as CIA, CMIIA, ACCA, ACA or equivalent. An IT Audit (technology, data), risk or fraud-related qualification such as CFE is advantageous.

·   Strong working knowledge of governance, enterprise risk management, internal control and the IIA Global Internal Audit Standards, with experience maintaining audit methodology, quality and documentation requirements.

·   Demonstrable experience supporting risk assessment and the development of strategic and annual internal audit plans, using business strategy, enterprise risk, regulatory developments and stakeholder insight to determine priorities.

·   Proven ability to scope, plan and lead complex, high-profile and cross-functional audits across multiple entities or jurisdictions, including setting the audit approach, resource requirements, milestones and quality expectations.

·   Demonstrable people leadership experience, including allocating work and managing, coaching, supervising and quality reviewing auditors, team members and specialist co-source providers.

·   Proven portfolio and project management capability, including prioritisation, resource allocation, budget awareness, dependency management, delivery against deadlines and timely escalation of delivery constraints.

·   Credible experience engaging, influencing and constructively challenging executives, senior management and control functions while maintaining Internal Audit independence and objectivity.

·   Ability to assess the design and operating effectiveness of governance, risk management and control frameworks and form balanced, evidence-based audit opinions using sound judgement and professional scepticism.

·   Ability to identify root causes and business impact, develop practical risk-based recommendations, agree clear ownership and timescales, and monitor and validate the implementation of agreed actions.

·   Excellent written, verbal and presentation skills, with experience producing concise executive reports and committee papers and presenting significant findings, themes and emerging risks to senior stakeholders.

·   Practical experience of fraud risk, anti-fraud control frameworks, investigations or fraud-related assurance, with the ability to assess fraud governance, risk assessment, prevention, detection, monitoring, escalation, response and management oversight arrangements.

·   Strong understanding of cybersecurity and IT risk, with experience leading or overseeing assurance across cyber governance, identity and access management, security operations, data protection, cloud and infrastructure resilience, third-party technology risk, incident response and disaster recovery.

·   Ability to direct technical specialists and critically evaluate specialist evidence and conclusions, translating complex cyber, technology, data and fraud risks into clear business impact and executive-level assurance.

·   Experience leading or supporting investigations, thematic reviews and advisory assignments whilst protecting internal audit independence and applying appropriate professional discretion.

·   Ability to use data analytics, AI, audit technology and continuous assurance techniques to improve audit coverage, insight, efficiency and risk monitoring.

·   Experience supporting resource planning, co-source procurement or provider management and ensuring external assignments are delivered to agreed scope, quality and cost.

·   Strong business and commercial acumen, with the ability to understand strategy, operating models, transformation programmes and cross-functional dependencies.

·   High integrity and discretion, with the confidence to make and defend evidence-based conclusions and deputise for Global Head of Internal Audit, when required.

International experience and an understanding of relevant UK legal and regulatory requirements are desirable.

·   Provides clear direction, sets high standards and creates accountability for delivery and quality.

·   Acts as a positive catalyst for change and balances independent challenge with pragmatic, commercially aware advice.

·   Develops capability in others through coaching, constructive feedback and meaningful delegation.

·   Works collaboratively across functions and geographies while protecting Internal Audit’s independence and objectivity.

·   Demonstrates curiosity, courage, sound judgement and a continuous improvement mindset.

Reward & Benefits: What's in it for me?

We want our people to feel recognised, supported and able to thrive both at work and beyond it.

We offer a competitive reward package designed to support your financial, physical and mental wellbeing, alongside opportunities to learn, develop and be recognised for the contribution you make. Benefits vary by role and location, and full details will be shared as part of the application process.

Equal opportunities: Our commitment to inclusion

Collinson Group is an equal opportunities employer. We welcome applications from people of all backgrounds, identities and experiences, and believe that different perspectives make our business stronger.