Internal Audit and Assurance Services Verified listing

Muslim Aid invites qualified and experienced firms to submit proposals for the provision of Internal Audit and Assurance Services, including specialist responsibilities defined in the organisation’s Internal Audit Charter and Terms of Reference.

Muslim Aid is a UK-registered international humanitarian and development charity working across multiple regions. The Internal Audit function plays a critical role in strengthening governance, safeguarding donor funds, ensuring regulatory compliance, and supporting organisational integrity.

Scope of Services Required

The appointed Internal Audit Service Provider will deliver an organisation-wide internal audit service, including:

Core Assurance & Advisory Work

• Delivery of a risk-based annual internal audit plan
• Assessment of governance, risk management and internal controls
• Reviews of financial management, internal financial controls (CC8), and fraud risk
• Programme, partner and country-office audits
• Compliance reviews for institutional and faith-based donors
• Safeguarding, PSEAH, ethics, and whistleblowing framework assessments
• IT, cybersecurity and data protection audits
• Value for Money and thematic reviews

Specialist Statutory/Regulatory Roles

The Internal Audit Service Provider will also act as:

• Money Laundering Reporting Officer (MLRO) for Muslim Aid, responsible for receiving and assessing suspicious activity reports and escalating to the NCA where required.
• Primary recipient of whistleblowing disclosures, ensuring concerns are logged, assessed and escalated in line with Muslim Aid’s Whistleblowing Policy.

Key Deliverables

• Annual audit plan and risk assessment
• Individual audit reports with findings, risk ratings and agreed actions
• Tracking and follow-up of management actions
• An annual overall audit opinion
• Attendance at Finance & Audit Committee meetings
• Support for investigations (without assuming management responsibility)

Required Qualifications & Experience

Firms must demonstrate:

• Registration and authorisation to operate in the UK
• Professional qualifications (e.g. ACCA, ICAEW, CIA, CPA, CISA)
• Proven experience auditing INGOs, charities or international operations
• Capability to deploy auditors to field locations globally
• Expertise in financial crime, safeguarding, investigations and IT audit (preferred)
• Strong understanding of UK Charity Commission guidance, donor compliance, sanctions, and counter-terrorism financing rules
• Independence, objectivity and no conflicts of interest

Contract Duration

A 2-year contract with the possibility of one extension of up to 2 years (2+2).

Standards and Compliance

The provider must operate in full alignment with:

• The Global Internal Audit Standards (2024)
• Muslim Aid’s Internal Audit Charter and ToR
• UK charity regulatory requirements
• Donor audit and compliance expectations