Internal Audit Tender

Description

Albyn Housing Society Limited is seeking to procure the services of a suitably qualified and experienced Internal Audit services provider to deliver a risk based Internal Audit for an initial period of three year commencing 01 January 2026. Full details of the requirements can be found in the Internal Audit Services Specification document attached to this notice. Lot 1: This procurement is for a three year appointment of an Internal Audit Services provider to Albyn Housing Society Limited, a registered social landlord. The role of internal audit is to provide management with an objective assessment of whether systems and controls (financial and non-financial) are working properly. It is a key part of the Society’s internal control system because it measures and evaluates the adequacy and effectiveness of other controls in order that: a) the Board and Leadership team can know the extent to which they may rely on the whole control system; and b) individual managers can know the reliability or otherwise of the systems and controls for which they are responsible. The responsibility for ensuring that appropriate and adequate arrangements are established for internal control rests with management of The Society. The internal auditor will be responsible for conducting an independent appraisal and giving assurance to the Audit & Risk Management Committee on internal control arrangements. It is for management to determine whether to accept and implement recommendations made by the internal auditor or, alternatively, for recognising and accepting the risks resulting from not taking action. The work of the internal audit service shall embrace the whole internal control system of The Society and its subsidiaries including all its activities, funded from whatever source. The internal audit service will consider the adequacy of systems and controls necessary to secure propriety, economy, efficiency and effectiveness in all areas. It will seek to confirm that management have taken the necessary steps to achieve these objectives. The internal auditor will be expected to carry out a rolling programme of internal audit work so that all main aspects of our operations are assessed at least once during the initial three years. Our current internal audit service consists of 37 days per annum which typically include the following: - Six assurance audits; - One key Financials Audit; - Follow up on implementation of previous audit points; - Audit Needs Assessment and preparation of annual plan, completed for Audit & Risk Management Committee to approve for the forthcoming year; - Annual Report; and - Audit Contract Management. It is on the above basis that bidders should tender. The internal audit service may also conduct any special reviews requested by the Board or Leadership Team provided such reviews do not compromise their objective independence or the achievement of their plan to audit the internal control system. These will be in addition to the annual programme of work. The Society has responsibility for the prevention, detection and investigation of irregularities, including fraud and corruption. The internal auditor should make arrangements to be informed, as soon as possible, of all suspected or discovered fraud. The internal auditor should consider any implications in relation to the internal control system and recommend to management the action it should take to strengthen systems and controls. Where the internal auditor becomes aware of fraud or irregularity the Executive Director of Group Services or Chair of the Audit & Risk Management Committee should be informed in order to agree on the further action to be taken. The internal auditor will be responsible for providing relevant, reliable and sufficient evidence of the adequacy and effectiveness of internal control arrangements and making recommendations for improvements to current practice. The internal auditor will be expected to attend Audit & Risk Management Committee meetings where internal audit issues are being discussed. There are usually four Audit & Risk Management Committee meetings a year. Attendance can be via MS Teams or similar medium with prior agreement. The Society is seeking a provider that is fully familiar with the operating experience and regulatory issues faced by Scottish RSLs.