NU/1847 Internal Audit Co-Source Provider

The scope of this contract is to support the in-house internal audit team with the provision of IT internal audit services to the University as follows:

Development of Internal Audit Plan

To contribute substantially to the design and update of the annual internal audit plan, through consultation with the Head of Internal Audit and key stakeholders within the organisation.

Delivery of Internal Audit Plan

To carry out planned and ad hoc internal audits, including: • The identification and documentation of key risks • The identification and documentation of key processes, policies and systems, by examining documents and discussion with key personnel • Liaison with stakeholders and Head of Internal Audit including managing the administration of availability for meetings, ensuring key touchpoints are booked in sufficiently in advance to enable the audit work to be completed within agreed timeframes • Leading meetings with stakeholders during planning, fieldwork and close out of the audits • The development of test plans • Testing of control design and operational effectiveness, and analysing the root causes and impact of associated findings • Making relevant, practical recommendations and obtaining stakeholder buy-in • Drafting audit reports and updating for Head of Internal Audit and stakeholder feedback

Audit, Risk and Assurance Committee

Contribute to reporting to Audit, Risk and Assurance Committee and attend where requested.

Insight and Support

To provide additional relevant insight and support to the Head of Internal Audit and key stakeholders in respect of IT risk and controls, beyond the delivery of internal audits, for example supporting the IT risk management process and embedding of a more robust three lines of defence model