Internal Auditor Interview Questions

1.1The internal audit function - purpose, mandate, independence, and the Three Lines Model

1.2Internal audit standards - the IIA International Professional Practices Framework

1.3Audit universe - building and maintaining a comprehensive view of auditable entities

1.4Risk-based audit planning - how to prioritise audits based on risk and stakeholder input

2.1Audit engagement planning - defining scope, objectives, and criteria for a specific audit

2.2Preliminary risk assessment - understanding the area being audited and identifying key risks

2.3Audit programme development - the tests and procedures that will gather sufficient evidence

2.4Resource planning - estimating effort, allocating team members, and managing the engagement timeline

3.1Audit testing techniques - inspection, observation, inquiry, recalculation, and analytical procedures

3.2Sampling - statistical and judgemental sampling and how to determine the right sample size

3.3Documenting evidence - working papers, evidence standards, and building a defensible audit file

3.4Identifying control weaknesses - what constitutes a finding and how to assess its significance

4.1COSO internal control framework - the five components and how they apply in an audit context

4.2Risk assessment - inherent risk, control risk, and residual risk and how auditors use them

4.3Control design vs operating effectiveness - the difference and why both need to be tested

4.4IT general controls - logical access, change management, and backup and recovery testing

5.1Audit finding structure - condition, criteria, cause, effect, and recommendation

5.2Writing clear audit reports - executive summary, findings, management responses, and action plans

5.3Communicating findings to management - the exit meeting, handling pushback, and reaching agreement

5.4Report ratings - how internal audit rates findings and overall audit opinions

6.1Tracking management actions - the follow-up process and ensuring commitments are delivered

6.2Escalation - when to escalate overdue or disputed findings to the audit committee

6.3Root cause analysis - understanding why controls fail and recommending systemic fixes

6.4Audit issue closure - what constitutes satisfactory remediation and how to validate it

7.1Data analytics in internal audit - how to use data to identify anomalies and improve coverage

7.2ACL, IDEA, and other audit data tools - extracting, transforming, and analysing large datasets

7.3IT audit fundamentals - cybersecurity, data privacy, and system controls testing

7.4Continuous auditing - using technology to provide ongoing assurance rather than point-in-time audits

8.1Fraud risk assessment - identifying fraud schemes relevant to the business and designing audit tests

8.2Fraud indicators - the red flags that auditors look for in transactions and behaviours

8.3Responding to fraud allegations - the auditor role in an investigation and working with legal

8.4Forensic techniques - evidence preservation, interview techniques, and reporting findings

9.1Internal audit governance - the audit charter, independence, and reporting to the audit committee

9.2Audit committee reporting - what to present, how often, and how to handle difficult questions

9.3Relationship with external audit - coordination, reliance, and avoiding duplication

9.4The internal auditor as a trusted adviser - moving beyond compliance to adding strategic value

10.1Technical questions - audit methodology, risk and control frameworks, IT audit, and fraud

10.2Scenario questions - how you handled a difficult finding, a pushback from management, or a fraud allegation

10.3Behavioural questions - independence, professional scepticism, relationship management, and continuous learning

10.4Salary negotiation, questions to ask the interviewer, and positioning your audit career path