RSM - Controls Assurance Associate Director ISAE & AAF

As one of the world's largest networks of audit, tax and consulting firms, RSM delivers big ideas and premium service to help middle-market businesses thrive. We are a fast- growing firm with big ambitions -- we have a clear goal to become the premium adviser to the middle market, globally. This vision touches everything we do, motivating and inspiring us to become better every day. If you are looking for a firm where you can build a future and make an impact, then RSM is the place for you.

Role overview

Responsible for leading and undertaking a range of complex and specialist internal controls engagements including US SOX, other ICoFR and Service Auditor reporting (under ISAE3402 and AAF standards). Responsible for managing the delivery of controls documentation and testing at client's sites, in accordance with RSM methodologies and relevant standards. Managing a team and working as an individual to deliver high quality Internal Controls assignments within required timescales and budgets. Working with the leadership team to grow the internal controls client base and high quality team.

Brief Job description

• Build strong relationships with key stakeholders across RSM, the risk & governance service line, and a wide variety of clients.

• Manage, perform, and quality control internal controls assignments embracing assignment planning programming, conduct and control of audit work, reporting findings, liaising with clients, and meeting relevant standards.

• Understand the key risks and the controls put in place to address those risks within each area of an internal controls assignment.

• Draft internal controls assignment planning documents for approval / review by Client / Partners.

• Active involvement in the delivery of engagements for more complex and specialist areas.

• Overseeing the preparation of process flows and controls documentation.

• Undertake review work in respect of significant findings.

• Assist Partners in ensuring that assignments are completed to time and budget.

• Prepare draft internal controls reports and working paper files to high quality standards and within the SLA on allocated assignments, adding value and good practice.

• Lead and supervise more junior staff on individual assignments including staff motivation, discipline and technical audit guidance.

• Provide job training and guidance for auditors and training for more junior auditors.

• Assess the performance of team members and provide feedback.

• Participate in RSM’s appraisal and development process.

• Be aware of and advise Partners of any potential additional work opportunities at existing clients.

• Work with Partners and the leadership team in market related activities and growth of client portfolio.

• Work with Partners in producing proposals in response to RFPs and enquiries.

• Ensure familiar with and comply with all RSM’s policies.

• Any other duties as required.

Technical skills

• Good technical knowledge of the internal controls standards (e.g. AAF, ISAE, SOX etc), internal controls documentation and testing, and individual subjects and sector issues relevant to the work.

• Previous experience of SOX (or equivalent) implementation.

• Previous experience of delivering readiness and type 1 controls assurance reporting engagements (under ISAE and AAF standards).

• Experience working with large global organisations.

• Ability to review and control technical content of work of others to ensure compliance with relevant standards and quality requirements.

• Provide technical support as required to team members.

• Understand the range of additional services that the firm can provide to meet clients’ needs.

• Identification and pro-active management of own technical training and development needs.

Communication (oral, electronic, written)

• Oral - able to express ideas and information with clarity and confidence, especially when communicating with clients.

• Good working relationship with clients to understand their needs and requirements.

• Relay appropriate and timely information in respect of assignments to others.

• Listening - demonstrate the ability to listen, evaluate and apply information gained.

• Written - prepare draft reports and technical working papers.

• Excellent attention to detail.

• Gain confidence and respect of colleagues and clients.

• Share own experience and expertise with others.

• Encourage teamwork and develop leadership skills.

Commitment /Attitude to work

• Take responsibility for resolving issues by either dealing with it personally or referring upwards where required.

• Take responsibility for self-development.

• Be able to train, coach, and develop team members and provide support to other staff as required.

• Show enthusiasm and self-motivation to provide excellent service.

• Show respect for others by listening to their views and suggestions.

• Be a team player by putting the team's needs before your own.

• Be pro-active and demonstrate a commitment to continuous improvement, such as raising queries, and challenging existing practices.

• Ability to be flexible when managing inconsistent and varying workloads.

Other

• The post holder will be expected to travel to client's sites in their own time.

• Overnight stays away from home may be necessary.

• Access to a car and full Driving Licence preferred.

Qualifications

• A relevant professional qualification e.g. ACA, ACCA, IIA or CIMA.

DLA Piper | 1

Job Title

Senior Resilience Manager

Location

UK

Reports To

Director Risk & Resilience

Direct Reports

One

Travel Required

Occasional

Working Pattern

Full-time, 35 hours per week

Contract Type

Permanent

Role Level

Translate

The Department

The Risk and Resilience department is where we unite four specialised teams: Risk, Policy and Culture, Enterprise Risk, and Operational Risk. Our mission… To cultivate a resilient organisation that not only anticipates challenges but thrives amidst them.

We are dedicated to proactively identifying, managing, and mitigating risks and opportunities while fostering a robust risk-aware culture throughout our firm. By ensuring that risk is thoroughly understood, well-governed, and aligned with our strategic objectives, we empower informed decision-making at every level.

In this fast-paced and ever-changing landscape, our unique position allows us to influence resilience across the organisation. Together, we navigate uncertainty and embrace opportunities, ensuring our firm continues to excel in the face of challenges

Role Purpose

To provide hands-on subject matter expertise in business continuity and disaster recovery, lead the ongoing enhancement and roll out of the firm’s resilience program. Key purpose is to be the business partner for BC and DR to collaborate with individuals from all business services areas (IT, HR, Marketing, etc) and client-facing practice groups internationally to develop, implement, maintain and execute continuity and recovery plans that meet the strategic, tactical and operational needs of the firm, and align with client, regulatory and standard requirements.

This position will be required to work closely with senior leadership, Information Technology, General Counsel, Operational Risk Management, Marketing, HR, Finance, Audit, InfoSec, Procurement and external stakeholders: feeding into the wider cross-function Operational Resilience framework which includes Crisis Management and Enhanced Supplier Resilience.

• Perform Business Impact Analyses and Risk Assessments across all practice groups and service areas of the firm, working with senior leadership, managers/owners of key business activities, subject matter experts and other stakeholders.

• Implement actions from the Enhanced Supplier Resilience forum into BC and DR, and report on progress.

DLA Piper | 2

• Embed CM and ESR into overall resilience framework.

• Develop an in-depth understanding of the business processes, facilities, equipment, IT networks/environment, suppliers, regulatory and client requirements, and interdependencies.

• Based on the Business Impact Analyses, update the firm's current business continuity framework and plans, identifying the appropriate strategies and tactics to achieve continuity, as well as appropriate threat mitigation measures and incident response structures.

• Be part of the firm's business emergency response hotline and on-call response team for BC DR.

• Support reporting for insurance renewals and client questionnaires and audits for all areas of BC DR.

• Maintain the currency of BC and DR plans and all subordinate and supporting documentation such as policies, procedures, specialist plans, templates, standards, to support the deployment, validation and management of the program.

• Train and prepare Bronze teams (offices) and work with internal stakeholders and external facilitators to train and test Silver, Gold and Business Response Teams.

• Ensure all of the above is done to comply with ISO22301 and support annual certification.

Key Areas of Responsibility

• Lead the BC and DR integration into the firms operational resilience framework.

• Lead the disaster recovery team to ensure its effectiveness through IT’s implementation, including the currency of DR scripts and testing.

• Be the leading expert on BC and DR at the firm.

• Leverage the regional risk and resilience team, the risk culture and engagement team, external facilitators and local business continuity champions to ensure robust BC DR across the firm.

• Developing, maintaining and delivering annual business continuity / crisis management training and exercise programmes directly or by facilitating other resilience resources to do so.

• Providing post exercise analysis and debrief.

• Preparing firmwide communications to promote BC and DR, in conjunction with Head of Communications and Brand.

• Preparing reports and presentations on BC and DR for Executive, Board, and Committees, particularly post incident reviews and lessons learnt.

• Oversee the execution of business continuity and response plans in the event of a business interruption / disruption, including supporting senior management by leading crisis management and incident response teams in the coordination and execution of all business continuity plans and related activities.

• Manages relationships with the firm's key BC and DR suppliers.

• Continuously validate the currency, accuracy and completeness of the Business Continuity Framework and DR Program through regular reviews and audits, and maintenance of the materials.

• Travelling to office locations as needed to provide training, support or project delivery where it cannot be done remotely or with local resource (limited).

• Supporting all business continuity / crisis management / disaster recovery operational preparedness including communications, response procedures and logistical arrangements.

DLA Piper | 3

• Benchmarking best practice for business continuity and disaster recovery development and execution in a large international corporate environment.

• Work with procurement, IT and other areas to ensure suppliers are aligned with firm RPOs and RTOs.

• Work with internal and external auditors to evidence and improve BC DR at the firm.

• Ensure that we have the ability to recover from a Disaster from a technology systems perspective in a timely fashion and with minimal business impact. Working within the IT Major Incident process to support the technical response and act appropriately to the recovery using Disaster Recovery measures.

• Own the IT Disaster Recovery Plan ensuring that it is suitable, workable, maintained and updated to reflect all relevant changes across the entire IT estate. In addition, provide and maintain agreed Disaster Recovery (DR) standards.

• Perform Business Impact Analysis of IT systems, document, highlight and provide guidance to manage risks and single points of failure identified; provide guidance to service owners regarding controls and mitigation.

• Collaborate with IT Operational teams to advance the IT Resilience programme ensuring processes are active and efficient.

• Develop a comprehensive programme of validation, encompassing people, processes, plans and technology, and ensure the plan is executed at the agreed frequencies. This includes coordinating the tests/exercises, and the documentation of scope and objectives/success criteria and post- exercise/test reports/lessons learned.

• Ensure that the IT Resilience recovery plans are maintained and updated to reflect all changes.

• Provide assurance of any outsourced providers DR provisions, validated testing through a rigorous review and challenge process.

• Provide knowledge transfer to key staff regarding our established IT Resilience procedures

• Identify, assess, and report IT Resilience related risks and issues. Maintain risks and issues log recording decisions formally, feeding into the main Information Security risk register.

• Document and report on a monthly basis about progress against testing, risks and issues, and escalations requiring resolution.

• Recommendations in terms of removal of redundant applications

Skills and Experience

• Qualification in business management, risk management, resilience, emergency planning, disaster recovery or business continuity management.

• Business Continuity and Disaster Recovery expert preferred (MBCI , FBCI or equivalent).

• 10 years of experience in business continuity, disaster recovery or operational resilience, theory and practice.

• Technical knowledge of IT systems important.

• Demonstrated technical expertise in BCP documentation, including Business Impact Analysis, Incident Management and Business Continuity planning.

DLA Piper | 4

• Expert trainer able to inspire and influence busy executives to engage with the Business Continuity / Disaster Recovery.

• Excellent ability to manage stakeholders, driving action and challenging inaction.

• Strong partnership abilities; skilled in influencing and motivating others especially senior leaders.

• Strong project management skills or experience of implementing a framework successfully across an international and matrixed organisation.

• Strong ability to implement non-mandatory or regulatory change.

• Strong problem-solving and decision-making skills.

• Excellent verbal and written communication skills including presentation development and delivery.

• Proven ability to design and deliver well thought through, relevant and challenging exercise scenarios to all levels of business continuity teams.

• Ability to work independently and think critically.

• A strong service focus with the need to listen and understand the essential requirements of different areas of the firm.

• A flexible approach to variable working requirements.

• Experience in lateral leadership as the role requires delivering through other teams internationally and in region.

• Ability to build connections and work collaboratively across boundaries at all levels.

• Ability to communicate in a succinct and engaging manner.

• A strong and broad understanding of IT methodologies, frameworks and best practices.

• Proven experience in dealing/working with 3rd party suppliers to achieve results

• Ability to understand at high level the technical design for business applications and “translate” for Business Users.

• A positive attitude that always exudes a “can do” approach.

• Genuine passion for IT resilience

• Desire to develop (both themselves and their capabilities)

• Initiative and ability to work under time constraints

• Agility to adapt to fast paced change and moving stakeholder requirements.

This role is equivalent to a Head of BC title in other organisations and has one direct report and support from consultancy and internal operations.

Error! Reference source not found. | | 5

About DLA Piper We're a global law firm helping our clients achieve their goals wherever they do business. Our pursuit of innovation has transformed our delivery of legal services. With offices in the Americas, Europe, the Middle East, Africa and Asia Pacific, we deliver exceptional outcomes on cross-border projects, critical transactions and high-stakes disputes.

For our people, that means a world of opportunity. You'll shape the future, have the freedom to seize opportunities, and discover your own path. Together, we unlock our potential and redefine what we can achieve.

Inclusion and Positive Social Impact At DLA Piper, we understand that inclusion is not a one-size-fits-all concept. We embrace and celebrate the range of perspectives, backgrounds and experiences that each individual brings to our firm. By fostering a culture that welcomes and appreciates all aspects of our individuality, we ensure that everyone has the opportunity to succeed.

Our commitment to inclusion and positive social impact enables us to provide exceptional service to our clients and communities, while nurturing a unique and inclusive culture for all our people. We welcome the unique contribution that you will bring to our firm and actively encourage applications from all talented people – however your talent is packaged, whatever your background or circumstance and regardless of how you identify.

Health and Wellbeing Our people’s wellbeing is crucial to them, our business and clients. We strive to create a supportive culture where everyone can thrive.

While we can’t eliminate all workplace stress, we empower our Partner's and Employee's to discuss challenges, support each other, and access resources like our Assistance Programme and Unmind platform.

We recognise our home and work lives aren't separate and that we all benefit from working flexibly. We value flexible working and are open to discussing agile arrangements that benefit everyone.

Our Values In all our interactions with our People, Clients, and Communities, we live by these values:

Error! Reference source not found. Error! Reference source not found.

Error! Reference source not found. | | 6

DLA Piper is a global law firm operating through various separate and distinct legal entities. Further details of these entities can be found at dlapiper.com.

This publication is intended as a general overview and discussion of the subjects dealt with and does not create a lawyer-client relationship. It is not intended to be, and should not be used as, a substitute for taking legal advice in any specific situation. DLA Piper will accept no responsibility for any actions taken or not taken on the basis of this publication. This may qualify as “Lawyer Advertising” requiring notice in some jurisdictions. Prior results do not guarantee a similar outcome.

Copyright © 2025 DLA Piper. All rights reserved.

Career Development At any career stage, there’s always more to learn. At DLA Piper, we support you on every step of the journey, whether it's through our bespoke programmes and experiences, learning from our international network, or with essential resources to help you every day.

As a global firm, we provide international development and secondment opportunities, investing in our truly global identity.

Our Hiring Approach Our interview process is designed to help you learn about us, and for us to get to know you. It allows us to understand both your professional skills and personal qualities. The recruitment process may vary depending on the position you are applying for, taking into account the uniqueness of each role.

You will meet your direct Line Manager, peers, and close collaborators. Some roles may include assessments, practical exercises, and panel presentations. Your DLA Piper recruitment contact will explain the process at the start, but feel free to ask any questions before applying.

Onboarding Where local legislation permits, we conduct pre-engagement screening checks that may include but are not limited to your professional and academic qualifications, your eligibility to work in the relevant jurisdiction, criminal records, financial stability and work-related references.

POSITION SPECIFICATION

ROLE : Group Internal Auditor

LOCATION : Ireland– Near Dublin airport preferably but other locations will be considered

OBJECTIVES

• Plans, executes and reports on audits / reviews assigned by the Group Head of Internal Audit & Compliance.

• Interprets policy and procedures and applies professional accounting, IT and auditing principles and standards to test and evaluate financial, IT, operational and risk management controls.

• Develops recommendations which have been agreed with management ensuring that the recommendations are realistic and achievable and cost effective and add value to the business.

• Build positive working relationships with Head Office and Divisional management teams to ensure mutual understanding of the role of internal audit and work with them on business process and internal control improvements.

• Communicate with key external parties such as auditors and relevant agencies.

• Performs other duties as assigned including ad hoc projects and special investigations as deemed appropriate by the Audit Committee.

CANDIDATE PROFILE

QUALIFICATIONS

• The candidate will be a qualified ACA or equivalent.

• Ideally Certified Internal Auditor (CIA), Certified Fraud Examiner (CFE), Certified Information System Auditor (CISA) or ACL Certified Data Analyst (ACDA) desirable.

EXPERIENCE

• An experienced Internal Audit professional in an international, ideally manufacturing group.

• Has operating in a Big 4 and / or a plc environment for a number of years.

• Has the ability to strike an appropriate balance between independence and common sense.

• Risk based approach.

• Familiarity with computer aided audit techniques.

• Familiarity with IT General Controls auditing.

PERSONAL QUALITIES

• Highly motivated with the ability to work on his / her own initiative.

• High level of personal and professional integrity.

• Able to influence and engage people at all levels across the Group.

• Credible, flexible, personable and team oriented.

• Strong problem solving abilities.

• Sound business judgement and an ability to be decisive.

• Clarity of thought with the ability to analyst complex business situations.

• Good negotiation skills.

• Excellent communication skills both written and oral.

• Able to work to deadlines.

REPORTS TO : Group Internal Audit manager

SCREENING PROCESS

1. Phone interview with the Group Head of Internal Audit & Compliance

2. Phone interview with a Group Internal Audit Manager

3. Meeting with the Group Head of Internal Audit & Compliance

4. Meeting with the Group CFO

TRAVEL : Regular travel (up to 30 weeks / year) will be required to the Group’s overseas subsidiaries

(+220 manufacturing locations worldwide)

TIMESCALE : First round interviews in October 2024

OFFICIAL

IRC2296350 - Lead Internal Auditor – Internal and External

Screening Questions: Do you have the right to work in the UK? ^Are you happy for me to include this screening question to filter initial applicants? Would you like any other yes/no screening questions to auto decline applicants? External Applicant cap: 50. <Are you happy with this as the cap?

About NR

About Network Rail…

Join Our Team at Network Rail!

Are you ready to make a difference in people's lives? At Network Rail, we connect passengers and freight customers, ensuring safe and efficient transportation across the country.

We're dedicated to building a diverse and inclusive organisation that reflects the passengers we serve. To achieve this, we're committed to becoming an open, diverse, and inclusive workplace, leveraging the skills and expertise of our talented workforce. Together, we strive to create a safe and accessible railway for everyone.

Investing in our people is key to enhancing the safety, reliability, and efficiency of our railway system. If you're passionate about making a meaningful impact, then this opportunity is for you!

Vacancy Details

Duration: Permanent

Location: This role is based in London Waterloo <Does this have to be just Waterloo or would you like to include other locations, e.g. MK and Manchester?

Band & Salary: Band 3C £55,596 - £62,546

Closing date: 5 th December. On occasions, we may need to close the advert early based upon application volumes. Late applications may not be accepted.

Next Steps: Interviews will be held W/C 9 th December, depending on business requirements.

(Brief Description)

Who are we looking for?

Network Rail is seeking an experienced and dynamic Lead Internal Auditor to join their team at the London Waterloo offices. In this pivotal role, you will leverage your expertise in identifying significant risks to business objectives while coaching, training, and guiding team members to excel. You’ll have the opportunity to work closely with senior executives, delivering actionable recommendations to enhance the quality of their control environments. This is more than a role—it’s a chance to be part of a vibrant, diverse team within a great company that values professional growth and collaboration. Ready to make an impact? Apply now!

^Please review/amend the above paragraph, this was created from a previous advert.

About the role (Internal / External)

About the team..

Network Rail Internal Audit team is a diverse team with people who have experience of having worked in Network Rail, FTSE 100 companies, Big 4, and the energy sector. We have variety of experience with qualified accountants, engineers, HSE specialists and auditors in the team.

OFFICIAL

Our audits cover all parts of the Network focusing on key health & safety, operational risks and processes, capital programmes, IT, Finance etc.

In the context of Network Rail’s vision, “Putting Passengers First”, Internal Audit’s purpose is to help the Board and Executive Committee to protect the assets, reputation, and value of Network Rail by challenging the design, operation and effectiveness o f the framework of controls which enable risk to be assessed and managed. All of this contributes to improving services for our customers.

^Please review/amend the above paragraph, this was created from a previous advert.

What does the average day look like?

As a Lead Internal Auditor, you will play a key role in guiding and empowering the Audit Team to deliver exceptional results. Under the direction of the Audit Manager, you’ll execute the audit program with precision, ensuring each audit aligns with the agreed Terms of Reference (ToR) in scope and timing. From drafting ToRs, audit programs, and reports to reviewing and validating the team’s work, you’ll ensure every detail is thoroughly addressed. Additionally, you’ll provide valuable coaching and training to team members while fostering positive and collaborative relationships with Auditees. This is your chance to lead with purpose and make a real impact!

^Please review/amend the above paragraph, this was created from the key accountabilities on the JD.

Essential Criteria

• Professional qualification – qualified accountant (ACA, CIMA, ACCA) or IIA or Operational experience

• Excellent communication and interpersonal skills – written and verbal, including report writing

• Ability to be a team player and to take the lead when appropriate

• Good problem solving, decision making and analytical skills

• Flexibility of approach, style and attitude.

^Please don’t amend the essential criteria

Desirable Criteria

• Experience within at least two different disciplines within Network Rail

• Risk management experience

• Controls and assurance experience

^You may amend the desirables if you wish

(How to apply)

Additional Information…

[Internal Only] Contact: If you have any questions or reasonable adjustments, please contact christian.nicholson@networkrail.co.uk

We're an inclusive employer of choice and we welcome applications from everyone!

We're also a Disability Confident Leader employer and we'll try our best to adapt the process and offer a reasonable alternative to help support people with disabilities access, apply and interview for roles. We will interview all disabled applicants who meet the essential criteria.

OFFICIAL

Safe behaviour is a requirement of working for Network Rail. Applicants should be able to demonstrate their awareness of our Safety Vision

You can visit Evenbreaks Career Hive for advice on accessibility support if you're unsure of the options available. Should you require any reasonable adjustments/modifications, please add a note to your application.

[External Only]

Some of our great benefits:

Flexible/hybrid working arrangements considered.

Generous annual leave (28 days plus statutory days), with the option to buy/sell days.

Discounts at stations with your Network Rail pass.

Defined benefit pension scheme

75% subsidy on train tickets.

Interest-free travel loan for train and car park season tickets.

Volunteer leave to make a positive impact.

Plus more….

BPSS

All offers of employment are conditional upon satisfactory completion of pre -employment checks. Click here for more information

POSITION SPECIFICATION

ROLE : Group Internal Auditor – Spanish / Portuguese speaker

LOCATION : Spain (Madrid or Barcelona) or Portugal (Lisbon or Porto)

OBJECTIVES

• Plans, executes and reports on audits / reviews assigned by the Group Head of Internal Audit & Compliance.

• Interprets policy and procedures and applies professional accounting, IT and auditing principles and standards to test and evaluate financial, IT, operational and risk management controls.

• Develops recommendations which have been agreed with management ensuring that the recommendations are realistic and achievable and cost effective and add value to the business.

• Build positive working relationships with Head Office and Divisional management teams to ensure mutual understanding of the role of internal audit and work with them on business process and internal control improvements.

• Communicate with key external parties such as auditors and relevant agencies.

• Performs other duties as assigned including ad hoc projects and special investigations as deemed appropriate by the Audit & Compliance Committee.

CANDIDATE PROFILE

QUALIFICATIONS

• The candidate will be a qualified ACCA or local equivalent.

• Ideally Certified Internal Auditor (CIA), Certified Fraud Examiner (CFE), Certified Information System Auditor (CISA) or willing to take those exams.

EXPERIENCE

• An experienced External & / or Internal Audit professional in an international, ideally manufacturing group.

• Has operated in a Big 4 and a plc environment for a number of years.

• Has the ability to strike an appropriate balance between independence and common sense.

• Risk based approach.

• Familiarity with computer aided audit techniques.

• Familiarity with IT General Controls auditing.

PERSONAL QUALITIES

• Native Spanish speaker / English bilingual. Any other languages (Portuguese or French preferably) is a plus.

• Highly motivated with the ability to work on his / her own initiative.

• High level of personal and professional integrity.

• Able to influence and engage people at all levels across the Group.

• Credible, flexible, personable and team oriented.

• Strong problem solving abilities.

• Sound business judgement and an ability to be decisive.

• Clarity of thought with the ability to analyst complex business situations.

• Good negotiation skills.

• Excellent communication skills both written and oral.

• Able to work to deadlines.

REPORTS TO : Group Internal Audit Manager

SCREENING PROCESS

1. Phone interview with Group Head of Internal Audit & Compliance

2. Phone interview with Group Internal Audit Manager

3. Meeting with Group Head of Internal Audit & Compliance + case study

TRAVEL : Regular travel (about 30 weeks travel per year) will be required to the Group’s overseas subsidiaries

(+225 manufacturing locations worldwide)

TIMESCALE : First round interviews in August 2025

Job title Senior Auditor

Job family Quality, Risk and Assurance Band D

Job purpose

The role performs financial, operational and systems/IT audits across the BBC. These audits may

range across all activities of the BBC including public service, commercial subsidiaries and BBC

charities.

The audit work is likely to focus on the ongoing review of core internal controls but will also

include ad-hoc specialist reviews.

In undertaking each audit, the role will assess the management and control of risk, completing the

audit work within planned timescales and in compliance with quality requirements.

The role will also manage relationships with key stakeholders across the business and with other

team members.

Key responsibilities and accountabilities

• Prepare detailed audit testing plans that focus on key risks. This will involve gathering

information by meeting people at all levels across the BBC.

• Carry out rigorous audit testing, flexing work plans in response to findings and emerging risks.

• Acknowledge issues, impacts, root causes and recommendations with management throughout

the course of audit assignments.

• Act as an advocate for internal control, sharing expertise within the team and encouraging best

practice behaviours across the business.

• Write clear, concise, robust and balanced audit reports.

• Lead or participate in tasks or projects required to meet departmental objectives.

• The role will also manage relationships with key stakeholders across the business and with

other team members.

Knowledge, skills, training and experience

Essential

• Significant auditing experience, including review of General IT Controls and Internal Audit

experience.

• Proven experience of working within an organisation of a comparable size or complexity to the

BBC.

• Proven ability to quickly acquire new knowledge and skills.

• Possess an appropriate combination of technical expertise in fields such as auditing, finance,

operations, or investigations.

• Ability to observe and understand business processes ensuring processes are documented

completely and accurately.

• Must be able to communicate effectively both verbally and in writing with a wide range of

groups and individuals.

Desirable

• Applicants will normally have at least one of the following professional qualifications as

appropriate to the role:

• Qualified Accountant through a recognised professional body (e.g. ACA, ACCA,

ACMA)

• Chartered Member of the Institute of Internal Auditors (UK)

• Certified Information Systems Auditor

• Direct experience of internal audit is desirable.

• It is desirable that applicants can demonstrate a significant level of audit or other relevant

expertise in a required area of specialism:

• IT Security

• Production management

• Value for money/efficiency programmes

• Project management and/ or audit of major project and change activity

• Review and/or management of major contracts, broadcast and business continuity

Job impact

Decision making

• Risk assessment in planning individual audits

• Judgements regarding sensitive issues for consideration by departmental/functional management

Scope

• Audit services provided across all functions and operations of the BBC including commercial

subsidiaries and charities.

Other information

For Reward team use only

Job Code

Definition: Support

This job description is a written statement of the essential characteristics of the job, with its principal

accountabilities, incorporating a note of the skills, knowledge and experience required for a satisfactory level

of performance. This is not intended to be a complete, detailed account of all aspects of the duties involved.