Internal Audit Co-Sourcing Governance Director

The mandate

This project will design a co-sourcing model that gives internal audit access to specialist capacity without transferring its judgement, independence or institutional knowledge to providers. The commission covers demand analysis, engagement governance, evidence standards, pilot oversight and transfer; it does not procure or select a named firm.

Five artifacts define delivery: capability-demand map, sourcing decision framework, statement-of-work and independence standard, quality-and-knowledge protocol, and two-engagement pilot and transfer report. The design must make clear which decisions always remain with the Chief Audit Executive and engagement owner.

Milestones fall at weeks four, nine, fourteen, nineteen and twenty-four. The Chief Audit Executive accepts demand and governance; the Audit Quality Head accepts protocol and pilot; the Audit Committee delegate accepts transfer. Acceptance requires explicit decision rights, verified provider competence, compliant files, knowledge capture and internal owner capability.

Client inputs include the approved audit plan, internal skill inventory, current provider terms, independence requirements, quality findings and two pilot engagements. The consultant will not run procurement, negotiate commercial rates, sign live reports or supply the pilot team. Missing inputs are documented through dependency control.

What you will own

• Map audit demand against internal capacity, specialist scarcity, independence requirements, learning value and continuity risk.
• Define when to build, borrow, co-source or outsource capability, including decisions that cannot leave internal ownership.
• Create statement-of-work standards for objective, scope, competence, evidence, review, access, confidentiality and deliverables.
• Establish conflict, independence and rotation checks proportionate to provider relationships and other services.
• Design internal review gates that prevent provider conclusions from entering reports without accountable audit evaluation.
• Pilot the governance on two engagements and track quality, rework, knowledge transfer, timeliness and decision ownership.
• Specify required workpapers, reusable knowledge, secure retention and exit support at assignment completion.
• Transfer sourcing governance through an internally led demand and quality decision on a third proposed engagement.

Candidate qualifications

• At least 15 years in internal audit leadership, assurance sourcing or audit operating-model consulting.
• Active Portuguese statutory auditor, CPA, ACA, ACCA or equivalent audit qualification, supported by CIA where relevant.
• Evidence of using specialist providers while keeping internal audit responsible for scope, evidence and conclusion.
• Deep knowledge of competence assessment, independence, contracting, workpaper rights, supervision and knowledge transfer.
• A case where you declined outsourcing because institutional knowledge or judgement risk outweighed capacity benefit.
• Experience designing provider quality measures beyond utilisation, deadline and stakeholder satisfaction.
• Demonstrated transfer through internal operation of sourcing and quality decisions.

Working terms and boundaries

• The project lasts six months at three days weekly and contains five accepted milestones.
• Scope covers co-sourcing design and two governance pilots; procurement, fee negotiation and staffing supply are excluded.
• The consultant cannot select a provider, sign audit reports or transfer Chief Audit Executive accountability.
• Audit plan, skill inventory, provider terms, independence rules, quality themes and pilot access are client dependencies.
• Completion requires two accepted pilots, captured knowledge and an internally decided third engagement.

Application

Applications for this mandate are received in one way only: through the India Board Terminal's application process. It is automated end to end. Your Executive Passport travels to the mandate holder in its confidential form, your answers to the three questions below are read before anything else in your file, and every stage that follows is recorded on your applications page.

There is no address to write to and no intermediary to call. The mandate holder reads what the Terminal delivers and nothing else, which is what keeps the process the same for every applicant and keeps your name out of it until you release it. Applications close on 8 October 2026. Mandate reference AUD-CON-2026-LIS-45.