Finance and accounting · Updated
Internal auditor interview questions
12 internal auditor interview questions, why UK employers ask them and what a strong answer covers, from risk-based planning to handling pushback on findings.
Getting your CV ready too? Read the internal auditor CV guide.
Internal audit interviews test your understanding of risk and controls, how you run audits from start to finish, and how you deal with people who disagree with you. Expect a scenario question such as "how would you audit this process?" and, for candidates from external audit, questions on how you'd adapt.
Audit approach questions
1. How would you plan an audit of our purchase-to-pay process?
Why they ask: It tests risk-based thinking.
A strong answer covers: identifying key risks (unauthorised spend, duplicate payments, fraudulent suppliers), the controls that should address them, testing design and operation, and using data analytics on payments.
2. What's the difference between testing control design and operating effectiveness?
Why they ask: A core audit concept.
A strong answer covers: design as whether the control would address the risk if it worked, operating effectiveness as whether it actually worked consistently over the period, and how each is tested.
3. How do you decide what goes into the annual audit plan?
Why they ask: Planning drives the value of internal audit.
A strong answer covers: the risk register, management and audit committee input, past findings, regulatory requirements and rotating coverage.
4. How have you used data analytics in your audits?
Why they ask: Analytics is increasingly expected.
A strong answer covers: testing whole populations rather than samples, the tools you used, and a finding the analysis produced.
5. How do you rate the severity of a finding?
Why they ask: Consistent ratings make reports credible.
A strong answer covers: impact and likelihood, the organisation's rating scale, and linking ratings to business consequences.
Stakeholder questions
6. How do you handle a manager who disagrees with your finding?
Why they ask: Pushback is a daily part of the job.
A strong answer covers: checking your evidence, listening to their view, discussing the risk rather than blame, and agreeing actions or escalating where needed.
7. Tell me about your most significant audit finding.
Why they ask: It shows the value you add.
A strong answer covers: the risk, the evidence, the impact, how management responded, and what changed.
8. How do you make sure audit actions are actually completed?
Why they ask: Overdue actions undermine internal audit.
A strong answer covers: agreed owners and dates, regular follow-up, testing closure, and reporting overdue actions to senior management.
9. How would you present findings to the audit committee?
Why they ask: Senior reporting is part of the role.
A strong answer covers: a concise summary, the key risks, management's response, and themes across audits.
Competency and fit questions
10. Tell me about a time you investigated suspected fraud.
Why they ask: Many roles include investigations.
A strong answer covers: confidentiality, preserving evidence, working with HR or legal, and the outcome.
11. You've come from external audit. How will you adapt?
Why they ask: It's a common move.
A strong answer covers: shifting from financial statement focus to wider business risk, thinking about controls and processes, and building relationships rather than one-off engagements.
12. Why internal audit?
Why they ask: They want genuine interest.
A strong answer covers: the variety, seeing the whole business, and making real improvements through your work.
Questions to ask them
- How is the audit plan built, and how much of it is operational versus financial?
- How does management usually respond to audit findings?
- What does the team use for data analytics?