Job Description
Purpose of role
The Internal Audit Manager is a management role within Collinson's third line of defence. The role is accountable for managing a defined portfolio of risk-based assurance and advisory activity across the Group and for supporting delivery of the Internal Audit Strategy and Annual Internal Audit Plan. The role holder will lead complex, cross-functional and international reviews from planning through to reporting and follow-up, including anti-fraud assurance, cybersecurity and broader IT risk assurance. The role will provide robust, independent insight on governance, risk management and internal control, and translate internal audit outcomes into clear, commercially focused recommendations for management. Where required, the Internal Audit Manager will manage and develop internal audit team members and co-sourced specialists, maintain senior stakeholder relationships, contribute to Global Audit & Risk Committee reporting and deputise for the Global Head of Internal Audit. The role will promote consistent professional standards, effective use of data and technology, and continuous improvement across the function.
Key responsibilities
- Own and manage delivery of an agreed portfolio of the risk-based Internal Audit Plan across all business areas, including but not limited to: strategic, financial, operational, technology, cybersecurity, fraud, legal and transformation risks.
- Support the Global Head of Internal Audit in developing the Strategy and Annual Internal Audit Plans, using enterprise risk, strategy, regulatory developments and stakeholder insight and foresight to inform internal audit priorities.
- Lead complex and high-profile internal audits and Independent Advisory Services ("IAS") across multiple entities and jurisdictions, setting scope, approach, resource requirements, milestones and quality expectations.
- Provide day-to-day leadership, supervision, coaching and quality review for Senior Internal Auditor(s), other team members and co-sourced specialists.
- Allocate work and monitor portfolio delivery, budgets, dependencies and emerging issues, escalating material risks and delivery constraints promptly.
- Build trusted, appropriately independent relationships with executives, senior management and control functions, acting as a credible adviser on governance, risk and control matters.
- Assess the design and operating effectiveness of governance, risk management and control frameworks and form balanced, evidence-based internal audit opinions.
- Ensure internal audit findings identify root causes, business impact and practical actions, with clear accountability and proportionate timescales.
- Produce and review concise, high-quality reports and executive papers suitable for senior management and the Global Audit & Risk Committee.
- Present significant findings, themes, overdue actions and emerging risks to senior stakeholders and, where required, the Global Audit & Risk Committee.
- Manage the follow-up and validation of agreed actions, challenging slippage and escalating significant or persistent risk exposure.
- Lead or support investigations, thematic reviews, advisory assignments and other priority work without compromising Internal Audit independence.
- Lead anti-fraud assurance activities, including assessment of fraud risk governance, preventative and detective controls, investigation arrangements, escalation protocols and management oversight of fraud exposure.
- Evaluate whether fraud risk assessments, monitoring, data-led detection and response arrangements are proportionate to the Group's products, channels, customers and geographic footprint.
- Lead and oversee cybersecurity and IT risk assurance reviews covering areas such as cyber governance, identity and access management, security operations, data protection, cloud and infrastructure resilience, third-party technology risk, incident response and disaster recovery.
- Engage effective with technology, information security, data and risk leaders, using specialist co-sourced support where required, and translate technical risk into clear business impact and executive-level assurance.
- Drive functional improvement through utilisation of the GRC tool (Diligent), data analytics, AI, audit technology, continuous assurance and more efficient risk-based audit methods.
- Maintain the Internal Audit methodology, quality standards and documentation expectations in line with applicable IIA Global Internal Audit Standards.
- Support resource planning, co-source procurement and provider management, ensuring assignments are delivered to agreed scope, quality and cost.
Core Accountabilities and Decision-Making
- Accountable for the quality, timeliness and professional judgement applied across the assigned