Job title Senior Auditor

Job family Quality, Risk and Assurance Band D

Job purpose

The role performs financial, operational and systems/IT audits across the BBC. These audits may

range across all activities of the BBC including public service, commercial subsidiaries and BBC

charities.

The audit work is likely to focus on the ongoing review of core internal controls but will also

include ad-hoc specialist reviews.

In undertaking each audit, the role will assess the management and control of risk, completing the

audit work within planned timescales and in compliance with quality requirements.

The role will also manage relationships with key stakeholders across the business and with other

team members.

Key responsibilities and accountabilities

• Prepare detailed audit testing plans that focus on key risks. This will involve gathering

information by meeting people at all levels across the BBC.

• Carry out rigorous audit testing, flexing work plans in response to findings and emerging risks.

• Acknowledge issues, impacts, root causes and recommendations with management throughout

the course of audit assignments.

• Act as an advocate for internal control, sharing expertise within the team and encouraging best

practice behaviours across the business.

• Write clear, concise, robust and balanced audit reports.

• Lead or participate in tasks or projects required to meet departmental objectives.

• The role will also manage relationships with key stakeholders across the business and with

other team members.

Knowledge, skills, training and experience

Essential

• Significant auditing experience, including review of General IT Controls and Internal Audit

experience.

• Proven experience of working within an organisation of a comparable size or complexity to the

BBC.

• Proven ability to quickly acquire new knowledge and skills.

• Possess an appropriate combination of technical expertise in fields such as auditing, finance,

operations, or investigations.

• Ability to observe and understand business processes ensuring processes are documented

completely and accurately.

• Must be able to communicate effectively both verbally and in writing with a wide range of

groups and individuals.

Desirable

• Applicants will normally have at least one of the following professional qualifications as

appropriate to the role:

• Qualified Accountant through a recognised professional body (e.g. ACA, ACCA,

ACMA)

• Chartered Member of the Institute of Internal Auditors (UK)

• Certified Information Systems Auditor

• Direct experience of internal audit is desirable.

• It is desirable that applicants can demonstrate a significant level of audit or other relevant

expertise in a required area of specialism:

• IT Security

• Production management

• Value for money/efficiency programmes

• Project management and/ or audit of major project and change activity

• Review and/or management of major contracts, broadcast and business continuity

Job impact

Decision making

• Risk assessment in planning individual audits

• Judgements regarding sensitive issues for consideration by departmental/functional management

Scope

• Audit services provided across all functions and operations of the BBC including commercial

subsidiaries and charities.

Other information

For Reward team use only

Job Code

Definition: Support

This job description is a written statement of the essential characteristics of the job, with its principal

accountabilities, incorporating a note of the skills, knowledge and experience required for a satisfactory level

of performance. This is not intended to be a complete, detailed account of all aspects of the duties involved.

1

Data Privacy Analyst – Job Description

Key details:

Department: Data Protection

Line Manager: Data Protection Manager

Role Type: Team Member

Direct Reports: n/a

Hours of Work: 37.5 per week (full time)

Location: Hybrid – you will be required to travel to Bunzl locations in order to fulfil the

requirements of this role.

About Bunzl and Bunzl UK & Ireland Business Services

Bunzl PLC is our parent company. A FTSE 100 company based in London. Many people use a Bunzl product every day of their lives. Bunzl is the largest value-added distributor in the world in our market sectors. Bunzl’s purpose is to deliver essential business solutions around the world and create long-term value for the benefit of all stakeholders. To find out more about Bunzl, visit www.bunzl.com. Bunzl PLC operates in over 30 countries. In Bunzl UK and Ireland, there are six divisions.

2

Classification: Confidential

The Bunzl UK & Ireland Business Services teams support our operating companies with

solutions in transactional finance, payroll, employee life cycle management, data protection,

environment, health & safety, and IT. With extensive knowledge of internal customers' needs,

they deliver excellent service across our operating companies. Our DRIVE behaviours help us

to make BUKI a great place to work.

Purpose

At Bunzl, we are committed to ensuring that all our customers' data is protected, and that our work complies with data protection legislation. We are seeking a Data Privacy Analyst (DPA) to help us sustain and improve our management of personal data at Bunzl UK & Ireland. Our Data Protection strategy and approach is evolving and maturing, and the role will evolve and mature with this. This is a role for someone who is adaptable, agile, and eager to learn and develop their knowledge of data protection and who has a genuine interest in business strategy and organisational culture and context. The DPA will report directly to the BUKI Data Protection Manager (DPM) and perform duties to support the DPM to ensure all business operations maintain compliance with data privacy legislation and relevant regulation/codes of practice. The DPM plays a key role within BUKI ensuring compliance with all data protection legislation and supporting the operational business areas and internal support functions. Specifically, to support the DPM so that the Data Protection Program is maintained, in accordance with the UK General Data Protection Regulation (GDPR) and applicable protection laws. This includes the development, implementation and maintenance of framework, policies, procedures, and governance model. Bunzl prides itself on providing a working environment that enables people to balance all aspects of their life. Whilst home working is a part of that approach, the delivery of business partnering and developing knowledge and credibility will be enhanced by spending a reasonable amount of time in our businesses in person.

Commented [AS1]: Environment, Health and Safety (EHS) - sorry to be picky!

3

Classification: Confidential

What will you do:

The primary and key activity for the successful candidate will be the management of the internal platforms and systems used to support compliance and reporting. For example, monitoring of Cookie Consent Management, Records of Processing, Vendor due diligence, data protection impact assessments and incident reporting. This will ensure the role remains varied and interesting. Accountabilities:

• Maintain and manage data privacy management tool (currently ‘One Trust’) and triage the workflow

• Monitor website privacy compliance • Be a point of contact for communications to the team, managing the team mailbox • Liaise with and assist the Data Protection Champions in more than 20 operating

companies for all privacy related matters, within the scope of the postholder’s knowledge and experience

• Assist and support the DPM in relation to meetings • Maintain and update the Data Protection Intranet presence • Assist with and where appropriate take the lead on data protection queries including

subject access requests • Assist with the investigation and management of potential breaches • Support record-keeping activities required by GDPR and/or corporate policies,

including Record of Processing activities, Data Privacy Impact Assessments, Legitimate Interest Assessments, Vendor risk analysis and other GDPR associated analysis

• Provide administrative and project management support to the DPM • Assist with data protection training program • Monitor the industry landscape to keep visibility on trends and best practices related

to Data Protection An ideal person for this role has:

• a desire to learn, be part of a close-knit team and want to build a career in Data Protection. They will have a good understanding of systems administration. Previous Data Protection experience and in turn the use of OneTrust is desirable but not essential for the right candidate.

• Data protection or privacy education is an advantage, including privacy certification as CIPP/E.

• Working knowledge of Microsoft Office (PowerPoint, Excel, Word), and online research tools

• Ability in production of MI and reporting • Excellent written and verbal communication skills • Strong attention to detail and quality assurance of monitoring and reports

• Confidentiality, integrity, and discretion in the handling of personal data

• Ability to plan and organise workload and manage own time effectively

• Strong analytical skills to research, analyse and collate information

4

Classification: Confidential

• Demonstrates high level of ownership and accountability

• Creative thinking

• Ability to work as part of a team and independently

• Enjoys interacting with and partnering people in the business to further their learning and management of data protection, on a day to day basis

• Actively seek out opportunities to improve processes and raise the profile of data protection across Bunzl UK & Ireland

• A full driving licence as travel to numerous Bunzl sites will be essential

How will your career be developed:

Career progression at Bunzl is performance-based, with support provided along the way.

Development activities are available to all roles aim to enhance your current skills and

prepare you for senior roles, including:

• Access to Bunzl My Learning, an e-learning portal with tailored and general content

for all knowledge levels.

• For leadership roles, the Bunzl Management Passport - a three-module course to

develop your leadership skills.

• An opportunity to apply for the Bunzl Leadership Programme, a level three

management qualification.

• Role-specific training opportunities - Bunzl will support with funded qualifications

where these will underpin, develop, and enhance the role and the postholder’s

capabilities.

5

Classification: Confidential

How will you be measured:

You will be measured on how you perform in four key areas: -

1. Displaying the BUKI Behaviours.

2. Performance against Team Objectives.

3. Performance against Personal Objectives.

4. Performance related to Bunzl’s competencies. These competencies are the same for colleagues across all our businesses. The competencies are detailed below.

COLLABORATE TO WIN

Promotes involvement through personal leadership style, champions others to do the same, strong involvement with other parties including suppliers. Proactively shares information and seeks out opportunities to help all stakeholders achieve their objectives. Encourages collaboration beyond that required to get the job done and involves stakeholders (beyond the obvious) to the developmental and motivational benefit of all.

FOCUS ON CUSTOMER

Drives business thinking by ensuring that understanding customer needs and responding accordingly is recognised as a strategic imperative. Successfully champions innovations in customer care across the business, which positively impacts on the customer’s experience. Develops strategic partnerships with customers that promote a collaborative experience and mutual benefit. Advances business thinking about customer service, championing excellent service, and motivating employees to understand service issues beyond their day-to-day work.

COMMUNICATE EFFECTIVELY

Actively engages with a wide range of stakeholders, understanding their needs and acting in the best interests of the business. Is highly articulate and inspirational through the clarity of communication. Actively promotes a business-wide culture of proactive, open, and appropriate communication by helping people understand the benefits it brings, and by putting in place the processes to support it. Builds extended networks of influence and delivers powerful messages in a way that motivates people in a varied business climate. Present written arguments in an informative, persuasive, and easily absorbed manner.

DEVELOPING SELF

Takes on additional tasks, projects, or opportunities to gain new experiences and perspectives. Seeks timely & regular feedback on own performance. Keeps up to date with personal development opportunities to improve skills and knowledge. Is a role model across the area. Practices positive performance and behaviours.

Document Owner HR Director

Date of last change 20/03/2025

In addition to the above you are required to undertake other duties which may reasonably be required of this role. ExCeL London may update Job

Descriptions from time to time in order to reflect changes in business requirements. To understand more about our ways of working you can view

them here: http://bit.ly/excel-waysofworking or to apply please visit ‘working at ExCeL’ on our website at www.excel.london

Job Description

Internal Audit Manager

Reporting to: Head of Internal Audit

About ExCeL London

We are a world-class venue based in the heart of London’s Royal Docks, hosting over 400 events and welcoming 4

million visitors annually. We recognise the role that every member of our team plays in our success. We pride

ourselves on placing our people at the heart of our business, with a positive culture that inspires, develops, recognises

and rewards our team.

You can read more about working with us here: https://www.excel.london/working-at-excel

Purpose of the role

The Internal Audit Team’s role is to protect the people, assets and reputation of ExCeL London, whilst driving efficiency and sustainability through the provision of independent assurance over the control environment. The primary purpose of this role is to support the Head of Internal Audit in delivering the Internal Audit objectives through the delivery of the audit plan and supporting the businesses to identify, assess, mitigate and manage their risks.

The Internal Audit Manager will be responsible for leading and executing internal audit engagements to assess the

effectiveness of internal controls, risk management, and governance processes. The role will ensure compliance with

statutory and regulatory requirements, company policies, and industry best practices while providing recommendations

for improvement. The Internal Audit Manager will work closely with senior management and stakeholders to enhance

operational efficiency and safeguard company assets.

The Internal Audit Manager will report directly to the Head of Internal Audit and work closely with the management team to identify and mitigate potential risks.

The role of the Internal Audit Manager has five key elements:

• Risk Assessment & Audit Planning – Identifying key risks, developing risk-based audit plans, and ensuring that audit priorities align with organizational objectives.

• Execution of Internal Audits – Leading and performing financial, operational, and compliance audits to assess internal controls and ensure compliance with statutory and regulatory requirements.

• Reporting & Recommendations – Preparing detailed audit reports, communicating findings to senior management, and recommending improvements to mitigate risks and enhance processes.

• Compliance & Regulatory Adherence – Ensuring that company policies, procedures, and operations comply with legal and regulatory requirements.

• Stakeholder Collaboration & Team Leadership – Coordinating with external auditors, regulatory bodies, and internal teams.

In addition to the above you are required to undertake other duties which may reasonably be required of this role. ExCeL London may update Job

Descriptions from time to time in order to reflect changes in business requirements. To understand more about our ways of working you can view

them here: http://bit.ly/excel-waysofworking or to apply please visit ‘working at ExCeL’ on our website at www.excel.london

Job Description

Key Responsibilities

• Develop and implement risk-based audit plans to assess key business processes, financial controls, and compliance programs.

• Lead, plan, and execute internal audits, including financial, operational, and compliance audits.

• Perform the allocated audit assignments in line with the IA department manual and relevant professional (e.g. ADAA, IIA) standards.

• Identify and assess risks, control weaknesses, and inefficiencies within business operations.

• Provide recommendations to mitigate risks and improve internal controls.

• Prepare clear, concise, and well-documented audit reports and present findings to senior management.

• Monitor and follow up on the implementation of audit recommendations.

• Ensure audits are conducted in accordance with professional standards and regulatory requirements.

• Collaborate with external auditors and regulatory bodies as needed.

• Support management in developing policies and procedures that strengthen the control environment.

• Build appropriate relationships with ExCeL London management whilst maintaining IA independence.

• Identify opportunities to promote good practice across ExCeL London.

• Be an enthusiastic and active member of IA by contributing ideas and delivering actions to improve IA.

• Keep abreast of changes in laws, regulations, and industry best practices related to internal auditing.

• Work with Head of Internal Audit to continually develop and refresh audit knowledge in line with relevant CPD requirements.

• Collaborate with external auditors and Risk and Compliance team, as required.

Core Competencies

• Communication Skills – Able to clearly understand and express ideas, issues, opinions. Must have ability to prepare concise and informative written reports pitched at a senior level.

• Self Confidence – Has the confidence to observe and listen when appropriate rather than needing to dominate interactions. Reflects on what has happened in order to learn from it. Demonstrates an accurate self- assessment of strengths and weaknesses. Able to challenge irregularities without being confrontational.

• Negotiation Skills – Uses listening skills to effectively understand the needs of the other party, gathers information and views and enters into a dialogue designed to reach agreement on an equal level between the parties.

• Independent – Capable of working effectively and autonomously without close supervision. Willingness to get involved in all aspects of the role at both high and low level.

• Detail Orientation – Ensures high levels of accuracy and consistent quality. Able to operate systems and procedures to ensure accuracy and quality. Monitors quality and to support continuous improvement.

• Planning and organising – Demonstrates ability to effectively organise large volumes of work, resources and staff. Plans for contingencies, copes well under pressure. Very competent at multitasking and prioritising work.

• Customer Service Orientation – A desire to help and serve our internal colleagues to meet their needs.

Refer to IIA Internal Audit Competency Framework

In addition to the above you are required to undertake other duties which may reasonably be required of this role. ExCeL London may update Job

Descriptions from time to time in order to reflect changes in business requirements. To understand more about our ways of working you can view

them here: http://bit.ly/excel-waysofworking or to apply please visit ‘working at ExCeL’ on our website at www.excel.london

Job Description

ATTITUDES & BEHAVIOUR REQUIRED AS AN EMPLOYEE OF EXCEL LONDON

• Positive Attitude

• Integrity, Honesty & Professionalism

• Continuous self-improvement

• Ability to take the initiative at work

• Respectful towards others; respectful of cultural differences

• Teamwork

• Personal Accountability

• Customer Service attitude

EDUCATIONAL / PROFESSIONAL QUALIFICATIONS

• Bachelor’s degree in Accounting, Finance, Business Administration, or a related field.

• Professional qualification in accountancy and/or auditing.

• Minimum 7 years of experience in internal/external audit in a commercial or practice environment.

• Strong knowledge of risk management, internal control frameworks, and auditing standards.

• Experience in risk-based auditing across a range of processes using the latest audit methodologies and techniques.

• Experience with data analytics tools and audit software is a plus.

• Analytical thinker capable of managing complex detail without losing sight of the big picture.

• Business or audit knowledge of IT and systems.

• Experience in computer-based auditing tools and techniques is a plus

• Excellent analytical, problem-solving, and decision-making skills.

• Strong written and verbal communication skills with the ability to present complex information clearly.

• Ability to manage multiple audit engagements simultaneously.

• High level of integrity, professionalism, and confidentiality

BENEFITS

This is a permanent role, offering a competitive starting salary, study support, discretionary bonus, private medical

along with an all-round comprehensive benefits package, along with 25 days annual leave excluding Bank Holidays.

To ensure we cultivate a truly great place to work we expect all our people to uphold the values we express as our

‘ways of working’, you can find more detail about these here: https://www.excel.london/working-at-excel

About CRH

We are CRH, and we are committed to contributing to a more resilient and sustainable built environment. We understand the wider impact our businesses can make in supporting human activity. We continue to do this through the delivery of unique, superior building materials and products for use in road and critical utility infrastructure, commercial building projects and outdoor living solutions.

CRH is the leading provider of building materials solutions that build, connect and improve our world. Employing c.75,800 people at c.3,160 locations in 29 countries, CRH has market leadership positions in both North America and in Europe.

Without you noticing our products, we are everywhere you live, work, and relax.

Our project portfolio includes some of the most sustainable and cutting-edge building projects around the world. Think of the asphalt on the Silverstone Grand Prix Circuit, the Paris Metro Rail project, but also the Louis Vuitton Museum in Paris, parts of the Burj Khalifa, and the Kennedy Space Centre.

Learn more about us through the following Link.

Position Overview

CRH Group Internal Audit is currently recruiting for the position of Senior Internal Auditor. The ideal applicant will work as part of a team responsible for achieving better efficiencies, optimizing our performance and growth through improving the operational and financial risk management of CRH. The successful candidate will build relationships with the various companies and cultures across CRH worldwide. To be effective, the candidate must be capable of thinking through and improving complex business processes, both financial and operational.

The auditor role provides an excellent opportunity for learning about business and for career development both within the IA team and also within the CRH group.

Key Tasks and Responsibilities

In this role, you will:

• Individually or working as part of a team, plan and carry out multi scope reviews of operational and financial controls

• Devise practical solutions, offer advice and guidance and co-ordinate the reporting of issues that arise during audits/reviews to promote improvements to risk management and internal processes

• Use audit software to enhance the effectiveness and efficiency of audits • Carry out special project work as required • Liaise and build relationships with senior group and operating company management on issues and

solutions

Individual Competencies

You are able to:

• Drive Results - Consistently achieving objectives, even under tough circumstances, pushing self and others to accomplish goals

• Have Courage - Stepping up to address difficult issues, saying what needs to be said.

• Be Resilient - Rebounding from setbacks and adversity when facing difficult situations. • Collaborate - Building partnerships and working collaboratively with others to meet shared objective

Key Functional Competencies

You possess the following:

• Excellent financial and analytical skills • Professionalism, mobility, initiative, commitment and objectivity • Highly motivated and able to work proactively in a changing environment • Fluent English both verbal and written. Another European language desirable • Willingness to travel to our companies

Experience / Education

You are/have:

• Qualified Accountant or equivalent experience • 3-5 years’ experience in a large accounting firm or similar accounting/business experience • Experience in SOX, corporate governance, internal controls evaluation, compliance and substantive

testing • Full clean driving license is essential

What CRH Offers You

• A culture that values opportunity for growth, development, and internal promotion • Highly competitive salary package • Secondary benefits including medical benefits and tax saver schemes • Group retirement savings program • Health and wellness programs, including an on-site gym and fitness classes • Excellent opportunities to develop and progress with a global organization

Job title Quality, Risk & Assurance (QRA) Manager

Job family Quality, Risk & Assurance Band E

Job purpose

The Risk Manager will play a critical role in supporting the Head of Risk Management to help the

organisation in identifying, assessing, managing and mitigating risks.

This role requires a proactive approach to managing various types of risks, including strategic risks

and operational risks. The role also requires ownership of all deliverables and the quality and

timeliness of all Risk reports for the various governance committees.

Ensure the provision of comprehensive, co-ordinated, effective and efficient professional services to

the BBC. Ownership and responsibility for specific elements associated with the delivery of the

strategic and operational objectives of the team.

Key responsibilities and accountabilities

• Accountable for the performance and delivery of all risk outputs and deliverables including risk

reports.

• Write reports suitable for Board-level executives – with the resulting call to action creating

impact across significant elements of BBC operations or organisation

• Present risk insights and recommendations to leadership and relevant committees

• Take a lead role in the timely delivery of activities and assignments across the business or in

specific field of delegated responsibility

• Build strong relationships, negotiate with – and influence – management

• Promote best practice, both within the team and across the business

• Support the professional development of QRA agenda across BBC business colleagues within

their particular specialism and a range of disciplines

• Lead on quality assurance, ensuring work in line with professional standards, e.g. IIA, IRM

• Maintain knowledge of BBC strategy, organisational development and risks to help inform QRA

activities. Have strong external insights to bring into the BBC.

• Pro-actively works with the business divisions to identify areas for focus and contributes to the

overall improvement in governance, risk management across the BBC

• Supports the implementation of robust corporate processes to ensure organisation operating

within its agreed boundary of risk

• Foster a strong risk-aware culture across all levels of the organization

• Important role in managing the team, assessing priorities, delivering quality of team's work,

getting output right first time

• Actively contribute to the continuous improvement of the team

• The role is specialist in nature and additionally is expected to contribute the medium and longer

term objectives of the team

Knowledge, skills, training and experience

Essential

• Ability and assurance to deliver high quality

outputs and deliverables, with a high degree

of own initiative, a range of activities in a

complex environment

Desirable

• In most circumstances, candidates will have

a relevant formal professional qualification

appropriate to the role (ACA, CIMA, IIA,

IRM, etc)

• Ability to negotiate and work alongside a

range of contacts including senior

management and the motivation to promote

improvements

• Relevant previous experience including the

management of other professionals in the

execution of activities and assignments

• Ability to examine, analyse -and contextualise

complex issues; identify key points and

develop effective, practical and simple

recommendations to resolve problems

• Ability to manage a team in order to deliver

activities and assignments to time, cost and

quality

• Experience working in or with organisations

of a comparable size and/or complexity to

the BBC

• Strong interpersonal, management and

communication skills

• Direct previous experience of working in

audit, assurance or risk functions

• It would also be a significant advantage to

have significant and substantial experience

in either technology or media/content; or

in other relevant areas of specialism where

value can be added (e.g. data analytics, value

for money, etc)

Job impact

Decision making: day-to-day management of team on assignments (operational delivery and personal

performance/development); judgement decisions regarding outcomes and conclusions, with

recognition of the potential for sensitivity in issues

Scope: team has pan-BBC coverage including public service broadcasting (PSB), charitable and

commercial entities

Financial: accountable for budgets on individual assignments; responsible for management and

oversight of co-source budget (£1m+), including making recommendations for re-prioritisation and

allocation of spend

Reports: may have direct reports depending on specific nature of role and team structures; expected

to manage junior members of the team on QRA activities as well as personally execute; also

expected to have the requisite interpersonal skills to indirectly manage and/or influence individuals

across the organisation in order to achieve successful delivery of assignments

Other: Significant internal and external impact of work/output – internally, work is submitted up to

Executive level and expected to create change across the organisation; externally, the impact of

failed assurance or risk management generates the potential for material reputational issues for the

BBC.

Other information

For Reward team use only

Job Code

Definition: Content Support

This job description is a written statement of the essential characteristics of the job, with its principal

accountabilities, incorporating a note of the skills, knowledge and experience required for a satisfactory level

of performance. This is not intended to be a complete, detailed account of all aspects of the duties involved.