Audit Documentation and Review Architecture Director

The mandate

This project will redesign audit documentation and supervisory review so files capture timely reasoning, evidence and challenge without becoming repositories of duplicated narrative. It applies to internal and statutory audit methods at a principles level and will be tested on separate pilots; it does not alter live audit opinions.

Five artifacts define delivery: documentation architecture, review-responsibility matrix, review-note protocol, two-file pilot and inspection-and-transfer pack. The design must show what was known, who decided, how contradictory evidence was resolved and when review occurred, while removing content that merely repeats source documents.

Milestones fall at weeks four, eight, thirteen, seventeen and twenty. The Sponsor accepts architecture and matrix; the Audit Quality Head accepts protocol and pilots; the methodology council accepts inspection and transfer. Acceptance requires standards traceability, timely review evidence, reduced duplication, closed critical defects and internal application.

Client inputs include current methodology, anonymised files, review findings, designated internal and statutory audit pilot teams, secure environments and decision logs. The consultant will not reopen issued opinions, backfill historical evidence or configure an audit platform. Missing access narrows the pilot through formal change control.

What you will own

• Define minimum documentation for objective, risk, procedure, population, evidence, exception, contradiction and conclusion.
• Design file architecture that preserves linkage while avoiding copy-forward narrative and uncontrolled attachment accumulation.
• Clarify preparer, manager, specialist, engagement leader and quality-review responsibilities and timing.
• Establish review-note protocols that distinguish questions, evidence gaps, judgement disagreements and editorial observations.
• Pilot the architecture on one internal and one statutory audit file, measuring review cycles, unresolved points and file size.
• Inspect pilot files for timely reasoning, evidence provenance, conclusion support and prohibited retrospective enhancement.
• Create retention, lock-down, late-change and audit-trail rules at a technology-neutral requirements level.
• Transfer the method through an internally led file review and interpretation of a difficult documentation case.

Candidate qualifications

• At least 15 years in audit methodology, quality inspection or engagement review at Director level.
• Active Malaysian approved auditor, CPA, ACA, ACCA or equivalent recognised audit qualification.
• Evidence of simplifying files while improving the traceability of judgement and supervisory review.
• Deep knowledge of audit documentation, evidence linkage, review timing, late changes, retention and quality management.
• A case where extensive documentation failed because it did not show how contradictory evidence was resolved.
• Experience identifying and preventing retrospective file enhancement that misrepresented timely work.
• Demonstrated transfer across both internal and statutory audit practitioners.

Working terms and boundaries

• The five-month project runs four days weekly with scheduled Kuala Lumpur travel for pilots and transfer.
• Scope includes architecture, two pilots and inspection; opinion changes, historical backfill and platform configuration are excluded.
• The consultant can recommend documentation standards but cannot approve live engagement conclusions.
• Current methods, anonymised files, review findings, pilot teams, secure access and decision logs are client dependencies.
• Completion requires accepted pilots, reduced duplication, closed critical defects and an internal review exercise.

Application

Applications for this mandate are received in one way only: through the India Board Terminal's application process. It is automated end to end. Your Executive Passport travels to the mandate holder in its confidential form, your answers to the three questions below are read before anything else in your file, and every stage that follows is recorded on your applications page.

There is no address to write to and no intermediary to call. The mandate holder reads what the Terminal delivers and nothing else, which is what keeps the process the same for every applicant and keeps your name out of it until you release it. Applications close on 12 October 2026. Mandate reference AUD-CON-2026-KUL-49.