Job title Senior Auditor

Job family Quality, Risk and Assurance Band D

Job purpose

The role performs financial, operational and systems/IT audits across the BBC. These audits may

range across all activities of the BBC including public service, commercial subsidiaries and BBC

charities.

The audit work is likely to focus on the ongoing review of core internal controls but will also

include ad-hoc specialist reviews.

In undertaking each audit, the role will assess the management and control of risk, completing the

audit work within planned timescales and in compliance with quality requirements.

The role will also manage relationships with key stakeholders across the business and with other

team members.

Key responsibilities and accountabilities

• Prepare detailed audit testing plans that focus on key risks. This will involve gathering

information by meeting people at all levels across the BBC.

• Carry out rigorous audit testing, flexing work plans in response to findings and emerging risks.

• Acknowledge issues, impacts, root causes and recommendations with management throughout

the course of audit assignments.

• Act as an advocate for internal control, sharing expertise within the team and encouraging best

practice behaviours across the business.

• Write clear, concise, robust and balanced audit reports.

• Lead or participate in tasks or projects required to meet departmental objectives.

• The role will also manage relationships with key stakeholders across the business and with

other team members.

Knowledge, skills, training and experience

Essential

• Significant auditing experience, including review of General IT Controls and Internal Audit

experience.

• Proven experience of working within an organisation of a comparable size or complexity to the

BBC.

• Proven ability to quickly acquire new knowledge and skills.

• Possess an appropriate combination of technical expertise in fields such as auditing, finance,

operations, or investigations.

• Ability to observe and understand business processes ensuring processes are documented

completely and accurately.

• Must be able to communicate effectively both verbally and in writing with a wide range of

groups and individuals.

Desirable

• Applicants will normally have at least one of the following professional qualifications as

appropriate to the role:

• Qualified Accountant through a recognised professional body (e.g. ACA, ACCA,

ACMA)

• Chartered Member of the Institute of Internal Auditors (UK)

• Certified Information Systems Auditor

• Direct experience of internal audit is desirable.

• It is desirable that applicants can demonstrate a significant level of audit or other relevant

expertise in a required area of specialism:

• IT Security

• Production management

• Value for money/efficiency programmes

• Project management and/ or audit of major project and change activity

• Review and/or management of major contracts, broadcast and business continuity

Job impact

Decision making

• Risk assessment in planning individual audits

• Judgements regarding sensitive issues for consideration by departmental/functional management

Scope

• Audit services provided across all functions and operations of the BBC including commercial

subsidiaries and charities.

Other information

For Reward team use only

Job Code

Definition: Support

This job description is a written statement of the essential characteristics of the job, with its principal

accountabilities, incorporating a note of the skills, knowledge and experience required for a satisfactory level

of performance. This is not intended to be a complete, detailed account of all aspects of the duties involved.

Job title Quality, Risk & Assurance (QRA) Manager

Job family Quality, Risk & Assurance Band E

Job purpose

The Risk Manager will play a critical role in supporting the Head of Risk Management to help the

organisation in identifying, assessing, managing and mitigating risks.

This role requires a proactive approach to managing various types of risks, including strategic risks

and operational risks. The role also requires ownership of all deliverables and the quality and

timeliness of all Risk reports for the various governance committees.

Ensure the provision of comprehensive, co-ordinated, effective and efficient professional services to

the BBC. Ownership and responsibility for specific elements associated with the delivery of the

strategic and operational objectives of the team.

Key responsibilities and accountabilities

• Accountable for the performance and delivery of all risk outputs and deliverables including risk

reports.

• Write reports suitable for Board-level executives – with the resulting call to action creating

impact across significant elements of BBC operations or organisation

• Present risk insights and recommendations to leadership and relevant committees

• Take a lead role in the timely delivery of activities and assignments across the business or in

specific field of delegated responsibility

• Build strong relationships, negotiate with – and influence – management

• Promote best practice, both within the team and across the business

• Support the professional development of QRA agenda across BBC business colleagues within

their particular specialism and a range of disciplines

• Lead on quality assurance, ensuring work in line with professional standards, e.g. IIA, IRM

• Maintain knowledge of BBC strategy, organisational development and risks to help inform QRA

activities. Have strong external insights to bring into the BBC.

• Pro-actively works with the business divisions to identify areas for focus and contributes to the

overall improvement in governance, risk management across the BBC

• Supports the implementation of robust corporate processes to ensure organisation operating

within its agreed boundary of risk

• Foster a strong risk-aware culture across all levels of the organization

• Important role in managing the team, assessing priorities, delivering quality of team's work,

getting output right first time

• Actively contribute to the continuous improvement of the team

• The role is specialist in nature and additionally is expected to contribute the medium and longer

term objectives of the team

Knowledge, skills, training and experience

Essential

• Ability and assurance to deliver high quality

outputs and deliverables, with a high degree

of own initiative, a range of activities in a

complex environment

Desirable

• In most circumstances, candidates will have

a relevant formal professional qualification

appropriate to the role (ACA, CIMA, IIA,

IRM, etc)

• Ability to negotiate and work alongside a

range of contacts including senior

management and the motivation to promote

improvements

• Relevant previous experience including the

management of other professionals in the

execution of activities and assignments

• Ability to examine, analyse -and contextualise

complex issues; identify key points and

develop effective, practical and simple

recommendations to resolve problems

• Ability to manage a team in order to deliver

activities and assignments to time, cost and

quality

• Experience working in or with organisations

of a comparable size and/or complexity to

the BBC

• Strong interpersonal, management and

communication skills

• Direct previous experience of working in

audit, assurance or risk functions

• It would also be a significant advantage to

have significant and substantial experience

in either technology or media/content; or

in other relevant areas of specialism where

value can be added (e.g. data analytics, value

for money, etc)

Job impact

Decision making: day-to-day management of team on assignments (operational delivery and personal

performance/development); judgement decisions regarding outcomes and conclusions, with

recognition of the potential for sensitivity in issues

Scope: team has pan-BBC coverage including public service broadcasting (PSB), charitable and

commercial entities

Financial: accountable for budgets on individual assignments; responsible for management and

oversight of co-source budget (£1m+), including making recommendations for re-prioritisation and

allocation of spend

Reports: may have direct reports depending on specific nature of role and team structures; expected

to manage junior members of the team on QRA activities as well as personally execute; also

expected to have the requisite interpersonal skills to indirectly manage and/or influence individuals

across the organisation in order to achieve successful delivery of assignments

Other: Significant internal and external impact of work/output – internally, work is submitted up to

Executive level and expected to create change across the organisation; externally, the impact of

failed assurance or risk management generates the potential for material reputational issues for the

BBC.

Other information

For Reward team use only

Job Code

Definition: Content Support

This job description is a written statement of the essential characteristics of the job, with its principal

accountabilities, incorporating a note of the skills, knowledge and experience required for a satisfactory level

of performance. This is not intended to be a complete, detailed account of all aspects of the duties involved.

Bunzl Internal Control

Position Description Internal Control Analyst, UK&I

Position Title Internal Control Analyst, Bunzl UK & Ireland

Department/Business Unit Finance, Bunzl UK & Ireland

Reports To Internal Control Manager, Bunzl UK & Ireland

Date July 2022

Role Responsibility & Objectives

Main Function/Purpose

The Internal Control Analyst will provide practical hands-on support to regional management and to all business areas to enable them to design, implement, stabilise and optimise their internal controls. You will report into the Internal Control Manager of Bunzl UK & Ireland, and work alongside a network of Control teams to cascade the new Group Internal Control Programme. You will do this with drive, energy and pragmatism. You approach will be tailored to Bunzl’s highly decentralised, international network of operations. You will win hearts and minds by acting as a true Business Partner. In this way you will ensure effective and efficient control activities, that balance risk and reward, are built in to all our daily activities in a way that adds value to the business. You will support the regional Internal Control Manager in a variety of project work in the areas of internal controls, risk management, compliance, IT, etc. as and when required. Travel is required across UK & Ireland but combined with flexible working.

Detailed Accountabilities/Objectives

• Support the Group Internal Control programme

• Work with the Regional Control Manager to support the Group Internal Control team in London on specific control projects as required

• Scoping of financial processes and control activities

• Act as subject matter expert in the region for internal control methodologies and activities across all processes

• Work with process owners, control owners and other stakeholders to ensure controls are documented to an appropriate standard

• Evaluate existing control design and, where required, recommend improvements

• Work with all stakeholders to ensure that control design improvements are implemented in accordance with agreed timelines

• Coordinate control test work, evaluate findings and report back on required actions

• Critically monitor progress made and provide regular update reports

• Be an ambassador for control improvement across all business areas; Leverage your knowledge of Bunzl operations by sharing best practice

Bunzl Internal Control

• Tracking, monitoring and advising on the remediation and closure of control gaps identified through management testing, control self- assessments or internal/external audit

Direct Reports None

Development Opportunities Opportunities to progress within the Global Internal Controls Team or into a number of finance or commercial roles within Bunzl Group.

Key Contacts

Internal

Regional Internal Control team Business Units finance and leadership teams Central and local IT teams Shared Service team Group Internal Controls team Group Head of internal Audit and Risk Internal Audit team

External External Audits External Consultants (where applicable)

Candidate Background

Education/Qualifications

• Risk and controls specialist with experience in a similar internal audit/internal controls/SOX compliance function and/or one of the Big 4 firms

• Minimum of 2 years relevant experience

• Qualified accountant, internal auditor or equivalent post graduate professional qualification

• Experience of working in a complex, decentralised international environment

Experience & Skills

• Understanding of financial and finance related processes and controls including related IT automated and IT General Controls

• Knowledge of “what good likes like” in respect of control design and operating effectiveness documentation, testing and control methodologies such as scoping, information produced by the entity (IPE), thresholds, sampling etc

• Working knowledge of IT General Controls (ITGC) is an advantage

• Knowledge of key finance systems with a capacity, curiosity and willingness to learn

• Previous experience coordinating and/or auditing under a SOX404 framework (or similar) highly valued

• Experience with the development and delivery of Controls, Risk and Compliance training

• Experience with Governance, Risk and Compliance software an advantage

• Project management and scoping and monitoring progress against work plans

• Knowledge of fraud management programmes and anti-fraud activities and controls

• Exposure to risks and opportunities relating to Shared Service environments

• Enterprise Risk Management processes and reporting

Bunzl Internal Control

Personal Characteristics & Behavioural Traits

• Communication – Confidently communicates with a range of audiences ensuring messages are concise, articulate and impactful, using the most appropriate methods of communication. Fluent English essential.

• Solves Problems – Monitors programs, identifies potential problems, and develops and implements collaborative solutions

• Team Player – Works collaboratively with other members of the Regional team, the broader Bunzl control network and other second/third lines of defence

• Inquisitive and curious – Performs root cause analysis to understand issues and problems, the key drivers behind it, then works with business leaders/risk/process/control owners to define solutions

• Continuous Improvement – Assist and guide others to address emerging challenges and risks and generate support for change initiatives and a continuous improvement environment

• Business and Political Acumen – Understands Bunzl’s business cycle and the execution of strategic goals. Keeps up to date with legal, regulatory, market and technological developments

• Nurtures Strong Relationships and acts as a Business Partner – Builds and sustains relationship with key stakeholders

• Autonomy – Understands what is required, structures time and tasks and puts action plans in place, manages multiple projects and holds people accountable to appropriately achieve outcomes

• Tenacity, Commitment and Personal Drive

• Integrity, Professionalism – exhibits high ethical standards

Approval

Manager Name

Position Internal Control Manager, [Region]

Signature Date

Employee Name

Signature Date