Job title Senior Auditor

Job family Quality, Risk and Assurance Band D

Job purpose

The role performs financial, operational and systems/IT audits across the BBC. These audits may

range across all activities of the BBC including public service, commercial subsidiaries and BBC

charities.

The audit work is likely to focus on the ongoing review of core internal controls but will also

include ad-hoc specialist reviews.

In undertaking each audit, the role will assess the management and control of risk, completing the

audit work within planned timescales and in compliance with quality requirements.

The role will also manage relationships with key stakeholders across the business and with other

team members.

Key responsibilities and accountabilities

• Prepare detailed audit testing plans that focus on key risks. This will involve gathering

information by meeting people at all levels across the BBC.

• Carry out rigorous audit testing, flexing work plans in response to findings and emerging risks.

• Acknowledge issues, impacts, root causes and recommendations with management throughout

the course of audit assignments.

• Act as an advocate for internal control, sharing expertise within the team and encouraging best

practice behaviours across the business.

• Write clear, concise, robust and balanced audit reports.

• Lead or participate in tasks or projects required to meet departmental objectives.

• The role will also manage relationships with key stakeholders across the business and with

other team members.

Knowledge, skills, training and experience

Essential

• Significant auditing experience, including review of General IT Controls and Internal Audit

experience.

• Proven experience of working within an organisation of a comparable size or complexity to the

BBC.

• Proven ability to quickly acquire new knowledge and skills.

• Possess an appropriate combination of technical expertise in fields such as auditing, finance,

operations, or investigations.

• Ability to observe and understand business processes ensuring processes are documented

completely and accurately.

• Must be able to communicate effectively both verbally and in writing with a wide range of

groups and individuals.

Desirable

• Applicants will normally have at least one of the following professional qualifications as

appropriate to the role:

• Qualified Accountant through a recognised professional body (e.g. ACA, ACCA,

ACMA)

• Chartered Member of the Institute of Internal Auditors (UK)

• Certified Information Systems Auditor

• Direct experience of internal audit is desirable.

• It is desirable that applicants can demonstrate a significant level of audit or other relevant

expertise in a required area of specialism:

• IT Security

• Production management

• Value for money/efficiency programmes

• Project management and/ or audit of major project and change activity

• Review and/or management of major contracts, broadcast and business continuity

Job impact

Decision making

• Risk assessment in planning individual audits

• Judgements regarding sensitive issues for consideration by departmental/functional management

Scope

• Audit services provided across all functions and operations of the BBC including commercial

subsidiaries and charities.

Other information

For Reward team use only

Job Code

Definition: Support

This job description is a written statement of the essential characteristics of the job, with its principal

accountabilities, incorporating a note of the skills, knowledge and experience required for a satisfactory level

of performance. This is not intended to be a complete, detailed account of all aspects of the duties involved.

Job title Quality, Risk & Assurance (QRA) Manager

Job family Quality, Risk & Assurance Band E

Job purpose

The Risk Manager will play a critical role in supporting the Head of Risk Management to help the

organisation in identifying, assessing, managing and mitigating risks.

This role requires a proactive approach to managing various types of risks, including strategic risks

and operational risks. The role also requires ownership of all deliverables and the quality and

timeliness of all Risk reports for the various governance committees.

Ensure the provision of comprehensive, co-ordinated, effective and efficient professional services to

the BBC. Ownership and responsibility for specific elements associated with the delivery of the

strategic and operational objectives of the team.

Key responsibilities and accountabilities

• Accountable for the performance and delivery of all risk outputs and deliverables including risk

reports.

• Write reports suitable for Board-level executives – with the resulting call to action creating

impact across significant elements of BBC operations or organisation

• Present risk insights and recommendations to leadership and relevant committees

• Take a lead role in the timely delivery of activities and assignments across the business or in

specific field of delegated responsibility

• Build strong relationships, negotiate with – and influence – management

• Promote best practice, both within the team and across the business

• Support the professional development of QRA agenda across BBC business colleagues within

their particular specialism and a range of disciplines

• Lead on quality assurance, ensuring work in line with professional standards, e.g. IIA, IRM

• Maintain knowledge of BBC strategy, organisational development and risks to help inform QRA

activities. Have strong external insights to bring into the BBC.

• Pro-actively works with the business divisions to identify areas for focus and contributes to the

overall improvement in governance, risk management across the BBC

• Supports the implementation of robust corporate processes to ensure organisation operating

within its agreed boundary of risk

• Foster a strong risk-aware culture across all levels of the organization

• Important role in managing the team, assessing priorities, delivering quality of team's work,

getting output right first time

• Actively contribute to the continuous improvement of the team

• The role is specialist in nature and additionally is expected to contribute the medium and longer

term objectives of the team

Knowledge, skills, training and experience

Essential

• Ability and assurance to deliver high quality

outputs and deliverables, with a high degree

of own initiative, a range of activities in a

complex environment

Desirable

• In most circumstances, candidates will have

a relevant formal professional qualification

appropriate to the role (ACA, CIMA, IIA,

IRM, etc)

• Ability to negotiate and work alongside a

range of contacts including senior

management and the motivation to promote

improvements

• Relevant previous experience including the

management of other professionals in the

execution of activities and assignments

• Ability to examine, analyse -and contextualise

complex issues; identify key points and

develop effective, practical and simple

recommendations to resolve problems

• Ability to manage a team in order to deliver

activities and assignments to time, cost and

quality

• Experience working in or with organisations

of a comparable size and/or complexity to

the BBC

• Strong interpersonal, management and

communication skills

• Direct previous experience of working in

audit, assurance or risk functions

• It would also be a significant advantage to

have significant and substantial experience

in either technology or media/content; or

in other relevant areas of specialism where

value can be added (e.g. data analytics, value

for money, etc)

Job impact

Decision making: day-to-day management of team on assignments (operational delivery and personal

performance/development); judgement decisions regarding outcomes and conclusions, with

recognition of the potential for sensitivity in issues

Scope: team has pan-BBC coverage including public service broadcasting (PSB), charitable and

commercial entities

Financial: accountable for budgets on individual assignments; responsible for management and

oversight of co-source budget (£1m+), including making recommendations for re-prioritisation and

allocation of spend

Reports: may have direct reports depending on specific nature of role and team structures; expected

to manage junior members of the team on QRA activities as well as personally execute; also

expected to have the requisite interpersonal skills to indirectly manage and/or influence individuals

across the organisation in order to achieve successful delivery of assignments

Other: Significant internal and external impact of work/output – internally, work is submitted up to

Executive level and expected to create change across the organisation; externally, the impact of

failed assurance or risk management generates the potential for material reputational issues for the

BBC.

Other information

For Reward team use only

Job Code

Definition: Content Support

This job description is a written statement of the essential characteristics of the job, with its principal

accountabilities, incorporating a note of the skills, knowledge and experience required for a satisfactory level

of performance. This is not intended to be a complete, detailed account of all aspects of the duties involved.

Job Description: Head of Audit and Assurance

This is an appendix to the generic job description Senior Business Partner, QRA (F).

Division Quality, Risk and Assurance

Reports to (title) Director of Audit and Assurance

Location base London or Birmingham.

Additional job specific responsibilities and accountabilities

Strategic Leadership

• Thorough understanding and experience of organisational priorities, the wider risk and

regulatory environment along with expert knowledge of best practice in audit and

assurance.

• Specific accountability for the component A&A strategy and end to end activity for a

large part of the BBC – e,.g. Commercial, Digital/ Technology/ Transformation or

Public Service.

Stakeholder Management

• Use expert knowledge and experience to guide and influence senior management on

assurance priorities and outcomes.

• Responsible for maintaining effective and collaborative A&A relationships with key

stakeholders, including senior leaders, across the BBC.

• Represent the assurance function at senior governance forums e.g. Divisional Risk

Committee, Operations Committees or similar, and Steering Groups.

• Be viewed as a credible and trusted expert and a point of first contact on assurance

matters that senior stakeholders can turn too.

Delivery

• Lead a large portfolio of audits to agreed performance standards, allocating and

directing resource as appropriate and using insight and knowledge to provide

timely and impactful assurance.

• Take a “hands on” approach for the execution of sensitive or critical pieces of

assurance.

• Be a deep expert in aspects of audit and assurance, bringing to the BBC leading

industry and technical practices.

• Support the delivery of the A&A objectives by working collaboratively with the

Director of Audit & Assurance and other members of A&A/QRA.

• Monitor and performance manage co-source audit providers. Lead and manage co-

source staff as appropriate.

• Manage co-source and inhouse budgets effectively.

Management

• Manage and mentor a team of professionally qualified and experience audit and

assurance staff.

• Use experience to create a culture of high performance, value for money and

respect.

• Role model positive behaviours.

Wider Leadership

• Be a visible ambassador of the BBC values, and the A&A function across the

business.

• Facilitate collaborative working relations with other stakeholders and assurance

providers in the BBC.

• Support the Director of Internal Audit in delivering the short and long term BBC A&A

strategy, with a focus on delivering relevant assurance, continuous improvement and

impact. Act as deputy to Director of A&A.

• Participate and take a formative role in the development of pan BBC risk management.

Specific Requirements

Qualifications: Relevant professional qualification e.g. ACA, CIMA, IIA.

Leadership Experience: demonstrable success in a senior leadership role within Internal Audit in

a large organisation or major advisory firm.

Technical skills: significant experience as an internal audit practitioner, conducting and a

managing a broad range of audits and assurance activity. Likely 15+ years minimum post qual.

experience. Experience in a 2nd line role advantageous.

Sector Experience: TMT, regulated industry or advisory sector preferred.

Personal: Demonstrable flexibility and willingness to travel within UK (c 10 - 20%) and

International (c 5- 10%)

Location: Must live in reasonable commuting distance of London or Birmingham

Flexible working Context: Agile contract, work. The work will require an on-site presence on a

frequent basis and permits working from home. We support flexible working arrangements upon

request.

This job description is a written statement of the essential characteristics of the job, with its principal

accountabilities, incorporating a note of the skills, knowledge and experience required for a

satisfactory level of performance. This is not intended to be a complete, detailed account of all

aspects of the duties involved.