Senior Auditor, Associate - Regulatory Compliance (Non-AML)

Summary of the position

The IGE Senior Auditor of Regulatory Compliance (non-AML), under the guidance of a Lead Auditor, performs assessments of the 1st (adherence) and 2nd line (advisory and testing) Compliance internal control framework. He/she performs independent testing and analysis on specific controls in order to meet the audit’s objectives, and documents design and effectiveness testing results in line with methodology requirements and Internal Audit Standards. He/she also contributes to drafting the debriefing presentation and the final report sent to Management.

Key Responsibilities

The IGE Senior Auditor is expected to work independently under minimum supervision, provide appropriate effective challenge of the control environment, and manage his/her time to meet all deliverable dates to keep the audit plan on schedule.

I - Audit assignments and Continuous Monitoring

The Senior Auditor is responsible for carrying out audit work as assigned by the Lead Auditor within the defined timeframes in accordance with IGE methodology and procedures and Internal Audit standards. Audit work includes continuous monitoring, formal audit coverage, and at times may include regulatory issue validation testing:

Independently carry out audit planning and fieldwork of audit coverage, including:

A preliminary assessment of the audited activity highlighting the related risks and controls

Interviews, testing and analysis of the results of the controls planned in the audit program

• Documented awareness of the regulatory requirements, impacts, and/or expectations

pertaining to coverage area(s).

Provide comprehensive documentation in test sheets the controls performed and conclusions reached

Identify and report on strengths and weaknesses of the audited areas, analyze the root causes and risk impact of the identified weaknesses, develop remediation and recommendations to address the audit findings and conclude on the effectiveness of the control set-up and business practices

Maintain open communication with auditees during coverage to prevent confusion or surprises, including documenting issues and identifying owners during the audit

Present audit conclusions to IGE management and to the management of the audited unit (debriefing presentation, final audit report, etc.)

Keep the Lead Auditor of the assignment/ Local Head of Audit informed of the progress on the audit work assigned, and escalate any issues that may impact or delay the audit’s execution, or raise any other relevant information on the assigned audit and the risk and control environment

Conduct recommendations follow-ups through the monitoring of remediation status and corrective actions taken by Management prior to closing any recommendations

Properly archive of any supporting documentation, audit evidence and deliverables in the designated IGE tools.