Fraud Risk Assurance Director

The mandate

The committee seeks independent advice on whether fraud-risk assurance addresses opportunity, incentive, rationalisation, collusion and management override rather than relying on policy and case statistics. The standing question is whether current assurance would detect a material scheme early and whether investigation outcomes genuinely inform control coverage.

Three days weekly will support monthly committee papers, review of selected audit and investigation themes, and two challenge workshops. Advice must distinguish allegation, indicator, control weakness, substantiated fact and residual risk, preserving legal privilege and procedural fairness.

The Director has no line authority, investigative command, disciplinary power or right to issue an audit conclusion. Recommendations on assurance gaps, thematic work and escalation route through the Committee Chair. Management, internal audit, legal and investigation owners retain their separate duties.

The five-month appointment ends with a fraud-assurance coverage opinion and transferred challenge protocol. Renewal requires a different question. Conflicts include recent investigation work, relationships with subjects or providers, and financial interests affected by case outcomes; these must be disclosed before access and may require complete recusal.

What you will own

• Map fraud-risk assurance across prevention, detection, response, investigation, lessons learned and remediation validation.
• Review ten assurance or thematic papers for scheme coverage, override risk, collusion, evidence quality and conclusion limits.
• Test whether whistleblowing and incident statistics are interpreted with reporting propensity, case ageing and substantiation bias in mind.
• Identify control testing that assumes honest management operation and therefore cannot address override or collusion.
• Facilitate two workshops using anonymised scenarios to calibrate escalation, evidence and assurance ownership.
• Recommend thematic audit coverage where case patterns indicate wider root causes without prejudging individuals.
• Establish committee reporting that protects privilege and identity while explaining exposure and assurance limitations.
• Transfer a fraud-assurance challenge checklist and unresolved-gap register to authorised internal owners.

Candidate qualifications

• At least 18 years in audit, fraud risk, forensic assurance or committee governance.
• Current Saudi-recognised CPA, SOCPA, ACA, ACCA or equivalent licensed-audit qualification, with CFE or CIA strongly preferred.
• Evidence of identifying management-override or collusion exposure missed by ordinary control testing.
• Deep understanding of fraud schemes, investigation boundaries, legal privilege, procedural fairness, thematic analysis and remediation validation.
• A case where incident statistics created false comfort because reporting behavior or case ageing was ignored.
• Experience advising committees without directing investigations or making disciplinary judgements.
• Complete conflict disclosure concerning investigation subjects, providers and related professional relationships.

Working terms and boundaries

• The adviser serves three days a week for five months, including monthly meetings and two scheduled challenge workshops.
• There is no line authority, investigation command, disciplinary power, audit-opinion right or management responsibility.
• Conflicts and privilege restrictions are assessed before every sensitive paper; the Chair controls access and recusal.
• Fact finding on individual allegations, legal advice and remediation operation are outside the appointment.
• Completion requires ten reviews, two workshops, an accepted coverage opinion and transferred gap governance.

Application

Applications for this mandate are received in one way only: through the India Board Terminal's application process. It is automated end to end. Your Executive Passport travels to the mandate holder in its confidential form, your answers to the three questions below are read before anything else in your file, and every stage that follows is recorded on your applications page.

There is no address to write to and no intermediary to call. The mandate holder reads what the Terminal delivers and nothing else, which is what keeps the process the same for every applicant and keeps your name out of it until you release it. Applications close on 11 October 2026. Mandate reference AUD-ADV-2026-RUH-32.