Group Risk & Assurance Manager - Glasgow
This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board.
Role Title: Group Risk & Assurance - Manager
Reports to Title: Head of Risk & Governance
Job Purpose:
To support the GRA function by performing the "Manager" role in internal audit and assurance engagements assigned by the Head of Risk & Governance, ensuring that work is completed on a timely basis to a high standard in accordance with all relevant IIA standards and City's Internal Audit Policy and Procedures.
Responsibilities:
Risk & Assurance Delivery
- Draft the annual Internal Audit Plan reflecting the Audit Universe and in line with risk appetite
- Prepare and maintain all Audit/Assurance Function Governance documentation
- Conduct and/or manage audit reviews as identified within the annual Internal Audit plan, to provide assurance that relevant control frameworks are designed and operating effectively.
- Ensure audit/assurance work is delivered in accordance with the International Professional Practices Framework (IPPF).
- Ensure audit/assurance work is carried out and concluded on a timely basis, in line with budgeted timescales and costs.
- Conduct risk-based audit/assurance planning and scoping, resulting in the preparation of individual Terms of Reference and Risk & Control Matrix, for each audit/assurance engagement, for approval by Head of Risk & Governance.
- Conduct/manage/review audit field work, including the documentation of design and operational effectiveness of controls, including supporting systems, ensuring all work is completed and documented to "re-performance" standards and in accordance with the Terms of Reference already agreed.
- Document and/or review internal audit findings to ensure clarity and insight, for approval by the Head of Risk & Governance.
- Ensure high-quality, realistic and value-adding recommendations to improve controls and risk management.
- Prepare Internal Audit reports for review and approval by the Head of Risk & Governance
- Communicate audit findings and provide recommendations for improvement during, and at the conclusion of, audits, both written and verbal.
- Track and review formal management responses on audit recommendations and subsequent remediation points, to ensure improved controls and processes are designed effectively
- Track and review the consistent implementation of agreed management responses to ensure risk is mitigated appropriately, in a timely manner.
- As directed, conduct and/or manage non-audit assurance reviews, ensuring the work is carried out in line with internal audit process and standards, where required.
- As directed, conduct and/or manage Ad hoc investigations including analysis of financial and/or operational business performance.
- Support the Head of Risk and Governance in the development of the Risk management framework
Team Leadership & Development
- Supervise and coach junior team members on execution of audit methodology, best practices, and risk analysis work.
- Allocate work and monitor progress, ensuring timely delivery and quality outputs.
- Support professional development and contribute to a positive, learning-focused team environment.
Reporting & Stakeholder Engagement
- Prepare and present clear, insightful reports for all relevant senior stakeholders, including clients and the Risk and Audit Committee.
- Build strong working relationships across the business, maintaining credibility and trust of the Internal Audit function.
- Prepare reporting for the quarterly Risk & Audit Committee, including an executive summary of recently completed workstreams, progress against the audit plan and the implementation status of agreed management responses to audit findings.
Knowledge, Skills, Experience
Knowledge
- Advanced knowledge and understanding of Internal Audit processes and principles.
- Strong working knowledge of the Global Internal Audit Standards
- Strong knowledge of Risk Management processes and frameworks (e.g ISO 31000)
- Strong understanding of Governance best practices
- Strong knowledge of IT General controls
- Strong knowledge of Cyber Security / Infosec controls
Skills
- Excellent communication, including report writing and presentation skills
- Able to distil complex issues into clear insights
- Able to build strong working relationships with internal stakeholders
- Confident engaging with senior stakeholders and influencing positive change.
- Ability to assess large data sets and interpret performance and trends
- Strong risk identification and root cause analysis skills
- Confident leading and working alone or as part of a team, with ability to adapt as required
- Able to allocate work, direct and motivate other team members
- Strong coaching abilities to develop other team members.
- Excellent organisational skills and attention to detail.
- Self-motivated, performance driven, customer focused
- Comfortable working in both structured and agile environments.
Experience & Qualifications
- Minimum of 5 years' experience in Internal Audit
- A qualified IIA professional or relevant professional qualification (e.g. ICAS, ACCA etc)
- Experience leading and managing audit or assurance activity
- Proven experience of coaching and developing others
- Experience in a complex, fast paced business environment preferable
- Exposure to data analytics tools and / or continuous assurance techniques.