a) Providing independent and objective assurance
to Executives and managers on the effectiveness of both the risk
management processes and of the management of key risks across
the Group, and on compliance with key
regulation;
b) Active promotion of an enterprise-wide
approach to management of risk and its effective use across the
Group’s operations;
c) Providing independent objective
assurance-related advice in areas that improve the Group’s
governance, risk management and risk mitigation/control
processes.
Key Measures • Understanding of the Group’s
business and associated risks/ regulatory
requirements • Delivery of effective audit assignments and
service to appropriate professional standards • Effective
audit coverage through management of own work and teamwork to
achieve Internal Audit Plan • Effective and productive
Relationship Management • Effective and productive working
relationships with all areas of the business • Quality of
service to internal and external
customers
Key
Accountabilities
Specific: • Identifying risks within
business operations and processes, and for IT Audit Consultants,
within IT systems and products • Carrying out assessments,
testing and evaluating risk mitigation • Producing of
focussed, timely audit information, reports and actions to meet
the needs of Audit Committee, Executives and
managers • Providing independent and objective specialist
advice on audit related matters to improve the Group’s
governance, risk management and risk mitigation/control
processes • Development and maintenance of awareness of the
Group’s business, associated risks and key
regulation • Development and maintenance of effective and
productive relationship management with specific business areas,
and working relationships across the Group • Active promotion
of an enterprise-wide approach to management of risk and its
effective use across the Group’s operations • Contributing
ideas and solutions to a forward-thinking Internal Audit
team Generic: • Complying personally with FSMA/FSA
requirements in respect of "Fit and Proper" requirements for
individuals; Statements of Principle/Code of Practice for
individuals; T&C - 5 Key Commitments; Money Laundering
requirements; Complaints rules • Complying (or securing
compliance) with the “Key Operational Compliance
Responsibilities” relevant to their areas of responsibility as
set out in Section 9 Appendix 3 of the Board Procedures Manual
(and on the Society’s intranet) • Providing quality service to
both internal and external customers • Contributing to the
cost effectiveness of the function including seeking to identify
improvements in efficiency of work processes and the use of
technology • Assure individual performance through maintenance
of professional and technical knowledge and
qualifications
People Management
responsibilities None
Experience, Skills &
Qualifications
Awareness and understanding of the Group’s
business, policies and products, as well as key relevant
statutory and voluntary regulation is required. A general
understanding of audit and management principles and practices is
also part of the role. IT Audit Consultants require technical
IT knowledge and experience of relevant IT technology, products
and systems.
A relevant professional qualification is
required (or in process of attainment), one of the following:
• Member of the Institute of Internal Auditors • Chartered
Accountant • Public Finance Accountant • Chartered
Cost/Management Accountant • Certified Information Systems
Auditor and usually a general education to degree level (or
equivalent).
Key
Contacts
Internal External • Relationships with
business areas all across the Group • External
Auditors • Specific Relationship Management responsibilities
for specified business areas • Peers within the financial sector
and specialist groups
Behaviours &
Competencies
• To act with integrity and objectivity at
all times. • To ensure the highest level of confidentiality
is maintained due to the privileged position of Internal Audit.
• Proven ability to quickly gain understanding of the
business areas to be assessed • For IT Audit Consultants:
proven ability to quickly gain technical understanding of IT
technology, products and systems • Ability to identify risks
and to assess the effectiveness of their management/
mitigation • Use of modern risk-based audit techniques • A
methodical, analytical and questioning approach • An
innovative approach to problem-solving • Ability to persuade
others of the need for improvements in risk management, risk
mitigation, systems and controls • Effective time-management
in completion of audit assignments • Clear communication
skills, both written and verbal • Displaying great teamwork,
both within Internal Audit and across the
organisation • Pro-active team member of Internal Audit.