Brodies LLP is a prominent UK law firm headquartered in Scotland, that provides expert advice to UK and international clients.
We have the capability and expertise to deliver mandates with global reach, uniting specialist perspectives from across our firm to offer bespoke legal solutions and advice, resulting in impactful outcomes for our clients.
With offices in London, Leeds, and throughout Scotland, we are dedicated to driving innovation in the legal sector, leveraging new technologies and forward-thinking strategies to deliver exceptional value and efficiency for our clients.
Our contract with our people underlines our commitment to fostering a supportive and inclusive work environment, prioritising the wellbeing and development of our colleagues to ensure they thrive both personally and professionally.
We are also deeply committed to making a positive impact in the communities in which we live and work. Through our pro bono work, charitable activities, and initiatives that promote diversity and inclusion, we strive to contribute meaningfully to society.
JOB TITLE
Internal Audit & Assurance Assistant - Audit & Assurance Services
REPORTING TO
Senior Manager - Audit & Assurance Services
Based in either Edinburgh or Glasgow with travel to any of our offices required from time to time.
We allow hybrid working with agreement with line managers, but most of your time will be office based and depending on business needs.
JOB PURPOSE
To work as part of the Audit and Assurance Services team, delivering a risk-based programme of internal audits across the firm and supporting the wider Audit & Assurance Services requirements, including data protection, information/cyber security, business continuity, quality management, AI governance and third-party assurance. The role will suit either someone with a background in compliance and risk who is looking to move into internal audit, or an internal auditor who wants to broaden their exposure within a professional services environment.
CORE TASKS
- Assist in the planning, scoping and delivery of internal audits in line with the annual internal audit plan, including risk assessments, walkthroughs, testing of controls and drafting of findings
- Support the Audit & Assurance Services team in developing audit programmes and testing approaches aligned to recognised internal audit standards and methodologies
- Prepare clear, well-evidenced audit working papers and draft audit findings, root cause analysis and practical recommendations for review
- Track and follow up management actions arising from internal audits and other assurance reviews to confirm timely and effective remediation
- Participate in internal process reviews and compliance monitoring against applicable standards and frameworks (e.g. ISO 9001, ISO 27001, ISO 22301, ISO 14001, ISO 42001) using the Audit & Risk platform
- Generate, review, file and control documentation, policies and processes associated with the maintenance of the firms Business Assurance framework
- Support the day-to-day administration of the firm's data protection compliance activities, including responding to data subject rights requests, assisting with data protection impact risk assessments and supporting incident and breach management
- Assist in producing internal audit, data protection and business assurance content for firm-wide communications and awareness initiatives
- Support the collation, review and analysis of team data and findings to inform senior management governance reporting and oversight
- Liaise with stakeholders across the business and with external certification bodies on Audit & Assurance Services matters
- Identify and support opportunities to improve business operations, processes and controls
- Support the day-to-day review, triage and logging of incidents and breaches reported across the firm, escalating as appropriate and maintaining accurate records of outcomes
- Undertake ad hoc administrative tasks as necessary, under the direction of the Senior Manager Audit & Assurance Services and Management Systems Coordinator
Be aware of Brodies' information security policies, and protect information assets from unauthorised access, disclosure, modification, destruction or interference at all times
PERSON SPECIFICATION
- Either: prior experience in internal audit or experience in a compliance, risk or related assurance role with a genuine interest in moving into internal audit
- Understanding of internal audit methodologies and risk-based auditing is desirable; a recognised internal audit or risk qualification or progress towards one is an advantageous but not essential
- Working knowledge of, or willingness to develop expertise in, data protection requirements (e.g. UK GDPR and the Data Protection Act 2018) is desirable
- Knowledge and experience of working with ISO Standards (e.g. ISO 9001, ISO 27001, ISO 14001, ISO 22301) is desirable
- Experience of continuous improvement methodologies
- This position is demanding, so the successful candidate should be used to working under pressure, often with tight deadlines and minimal supervision
- Logical and objective approach to problem solving, with excellent communication skills and confident in dealing with people at all levels, including senior stakeholders
- High level of accuracy and attention to detail, particularly when undertaking audits
- A strong team player – willing to go beyond regular duties and help out where needed
- Presents a professional image to clients and other external organisations at all times
- Organises and prioritises time effectively
- Uses initiative and able to work independently
- Self-motivated
SKILLS
- Excellent organisational skills
- Strong analytical skills, with the ability to assess processes and controls and identify risks and improvements
- Ability to multitask and prioritise
- Proficient in the use of Microsoft applications:
- Comfortable using, or willing to learn, AI-enabled tools (e.g. Microsoft Copilot) to support audit, research and assurance work
- Willingness to enhance IT literacy and general awareness and understanding of role specific requirements through training