Group Risk & Assurance Manager

Position: Group Risk & Assurance Manager (Permanent)
Job Title:

Group Risk & Assurance Manager

Location:

Glasgow Head Office

Contract Type:
Permanent

Working Hours:

37.5 Hours Per Week

Competitive Salary & Package!

Job Purpose:

To support the GRA function by performing the “Manager” role in internal audit and assurance engagements assigned by the Head of Risk & Governance, ensuring that work is completed on a timely basis to a high standard in accordance with all relevant IIA standards and City’s Internal Audit Policy and Procedures.

Responsibilities:

Risk & Assurance Delivery

* Draft the annual Internal Audit Plan reflecting the Audit Universe and in line with risk appetite

* Prepare and maintain all Audit/Assurance Function Governance documentation

* Conduct and/or manage audit reviews as identified within the annual Internal Audit plan, to provide assurance that relevant control frameworks are designed and operating effectively.

* Ensure audit/assurance work is delivered in accordance with the International Professional Practices Framework (IPPF).

* Ensure audit/assurance work is carried out and concluded on a timely basis, in line with budgeted timescales and costs.

* Conduct risk-based audit/assurance planning and scoping, resulting in the preparation of individual Terms of Reference and Risk & Control Matrix, for each audit/assurance engagement, for approval by Head of Risk & Governance.

* Conduct/manage/review audit field work, including the documentation of design and operational effectiveness of controls, including supporting systems, ensuring all work is completed and documented to “re-performance” standards and in accordance with the Terms of Reference already agreed.

* Document and/or review internal audit findings to ensure clarity and insight, for approval by the Head of Risk & Governance.

* Ensure high-quality, realistic and value-adding recommendations to improve controls and risk management.

* Prepare Internal Audit reports for review and approval by the Head of Risk & Governance

* Communicate audit findings and provide recommendations for improvement during, and at the conclusion of, audits, both written and verbal.

* Track and review formal management responses on audit recommendations and subsequent remediation points, to ensure improved controls and processes are designed effectively

* Track and review the consistent implementation of agreed management responses to ensure risk is mitigated appropriately, in a timely manner.

* As directed, conduct and/or manage non-audit assurance reviews, ensuring the work is carried out in line with internal audit process and standards, where required.

* As directed, conduct and/or manage Ad hoc investigations including analysis of financial and/or operational business performance.

* Support the Head of Risk and Governance in the development of the Risk management framework

Team Leadership & Development

* Supervise and coach junior team members on execution of audit methodology, best practices, and risk analysis work.

* Allocate work and monitor progress, ensuring timely delivery and quality outputs.

* Support professional development and contribute to a positive, learning-focused team environment.

Reporting & Stakeholder Engagement

* Prepare and present clear, insightful reports for all relevant senior stakeholders, including clients and the Risk and Audit Committee.

* Build strong working relationships across the business, maintaining credibility and trust of the Internal Audit function.

* Prepare reporting for the quarterly Risk & Audit Committee, including an executive summary of recently completed work streams, progress against the audit plan and the implementation status of agreed management responses to audit findings.

Knowledge, Skills, Experience

Knowledge

Advanced knowledge and understanding of Internal Audit processes and principles.

Strong working knowledge of the Global Internal Audit Standards

Strong knowledge of Risk Management processes and frameworks (e.g ISO

Strong understanding of Governance best practices

Strong knowledge of IT General controls

Strong knowledge of Cyber Security / Infosec controls

Skills

Excellent communication, including report writing and presentation skills

Able to distil complex issues into…