Responsible for leading the strategy, planning, and delivery of an effective independent assurance programme for the audit of all Group functions (Group central functions, to include IT and the Shared Service Centre, and Group operational functions), with the objective of providing independent assurance to management and the Audit and Risk Committee over the existence and effective operation of Group internal controls and adherence to key group policies and procedures.

In addition, the role will be responsible for the provision of assurance to support management’s formal attestation on the effectiveness of internal controls over material risks; manage the Group’s whistleblowing provision and lead independent investigations; and lead the development of data analytics to improve the efficiency and coverage of assurance.

The role will work with other members of the Risk and Audit Leadership Team to support the Director of Audit and Risk in the future development and improvement of the wider Risk and Internal Audit department.

Director of Audit and Risk

Specifically, the role will be responsible for:

• Development and management of Total Assurance (assurance mapping) setting out the combined assurance provision over the Group’s principal risks and audit universe in order to demonstrate how the function provides assurance to the Audit and Risk Committee;
• The overall strategy, approach and delivery of Group audits (GSC functions, Group central audits, eg. Finance, HR, Legal and Compliance), IT and systems audit, and Group Operational functions (eg. Group Land, Group Sales and Marketing, Group Commercial);
• The creation and management of a resource plan to deliver the Group audit programme in line with agreed Audit Committee deadlines
• Assurance over internal controls over material risks (ICoMR) and the provision of an annual attestation to management on the effectiveness of controls;
• Internal Audit department KPI reporting (IA performance reporting) for the divisional audit programme;
• The continued development and improvement of risk based audit to drive efficiencies in the delivery of audit, adding value where possible;
• The development and provision of data analytics to improve the efficiency and coverage of assurance;
• The Safecall whistleblowing provision and delivery of independent investigations, in particular fraud investigations;
• Assurance over group fraud risk;
• The delivery of any specific independent project assurance work;
• Managing relevant co-source suppliers for the provision of assurance over the above areas (where appropriate);
• The preparation of risk reporting to the Director of Audit and Risk, management and the Audit and Risk Committee;
• Draft and deliver Group Audit presentation to management (Executive Committee), Audit and Risk Committee or PLC Board at the request of the Director of Risk and Audit;
• Attendance at Executive Committee or Audit and Risk Committee meetings as the request of the Director of Audit and Risk / invite;
• Managing the work of the Group Audit Manager and IT Auditor to deliver the Group audit plan, developing these direct reports, and coaching wider team members; and
• Working with the external auditors for the purpose of the external statutory audit, as well as aligning on the approach for assurance over internal controls over material risks.