00:00:02 Speaker 1
The Institute of Internal Auditors presents all things internal audit in this episode, Mike Levy sits down with Rania Bijani to discuss what it takes for internal auditors to become strategic business partners from mindset shifts and organizational alignment to building trust and influencing change. Bajani shares transformational.
00:00:22 Speaker 1
Insights grounded in global experience. The conversation covers the evolving role of internal auditors.
00:00:29 Speaker 1
Essential competencies and how to earn a seat at the table by becoming a catalyst for strategic value.
00:00:37 Speaker 2
Just to dive right in, you know, how would you define strategic business partner in the context of internal auditing?
00:00:42 Speaker 3
The critical point is strategic and partner. So what is strategic strategic really is always looking at a long term perspective. Strategic is looking to solve problems, is looking to influence and is looking, anticipating need.
00:01:02 Speaker 3
I'm a partner. Is very much about working together, about collaboration, about win, win solutions and about engagement. So when it comes to what does that mean for internal audits to be strategic partners and strategic business partners?
00:01:21 Speaker 3
It's very much about taking.
00:01:24 Speaker 3
That view, what is the vision that we want for our internal audit department? How does that vision marry to the organizational strategy and and starting from that, then to going and thinking about how do we serve best the business?
00:01:45 Speaker 3
How do we align to the business and then really how do we help the business solve its problems? So to answer you slightly differently, when we're talking about strategic business partner, it is really about that a leader and the auditor and that team together.
00:02:05 Speaker 3
That are thinking strategically that are very much focused on what results they want to deliver for the organization and how these result.
00:02:18 Speaker 3
Align to the strategy of the business and how can this internal audit function enable the achievement of the strategic goals of the organizations? So by that then there, there is by definition an element of not only looking backwards as to the.
00:02:37 Speaker 3
Insights of what the past has taught us, but taking a foresight and looking ahead about how can we help the organization.
00:02:46 Speaker 3
And it is about building that relationship. And when we talk about relationship, we're talking about building that bridge, the trust, the respect, the credibility and having that collaborative spirit.
00:03:01 Speaker 3
And also being strategic business partner is about being a change age.
00:03:06 Speaker 3
Agent so it's not just about saying this is what's wrong and this is what's right, but it's truly about being a catalyst for positive change in the business.
00:03:15 Speaker 2
Well said and I think and I'd be remiss if I didn't mention this. I think so much of what you just articulated is so closely aligned with the new global internal audit standards that I think this, this topic is very timely up, you know for for many of our listeners as you as you likely.
00:03:29 Speaker 2
You know the new global internal audit standards went live in January and as part of that for the first time, we have documented requirements around strategic planning process within the within internal audit we've talked about and the the work of advisory services and advisory within the new standards as well as you know in the past we have.
00:03:49 Speaker 2
Always talked about the need for internal audit to be a trusted advisor to the organization, and I'd love to dig into that a.
00:03:55 Speaker 2
Little bit more.
00:03:56 Speaker 2
Because for what you just articulated, I I believe is a little bit different than that. What do you see the difference between trusted advisor like we've been talking?
00:04:03 Speaker 2
And a strategic partner to the organization. How are those two things different?
00:04:07 Speaker 3
Being a trusted advisor is a somehow a prerequisite to being a strategic partner is that if that makes sense, Mike, you have to go through that. You know that step in your journey so that you can elevate yourself to the strategic.
00:04:26 Speaker 3
So if we think about it like a Russian doll, the trusted advisor is the the baby one inside, if that makes sense.
00:04:33 Speaker 3
Trusted advisor is about the level of communication and trust that you build that you can exchange ideas and the the your internal ODT, your internal client.
00:04:47 Speaker 3
We share their concerns etc, knowing that they trust you not to automatically use it against them, right, and that they can come to you with a problem and that they can seek your advice. But that does not necessarily mean that.
00:05:06 Speaker 3
You are being proactive as an internal auditor and it does not necessarily mean you're stepping up to see the bigger picture.
00:05:14 Speaker 3
So in answering your question, for me the difference is it is about stepping up. It is about seeing the business as a whole and a strategic partner. This is a lot more proactive action on the part of the auditor to take lead in.
00:05:34 Speaker 3
Fully understanding what does the business need, what is the strategy? How do I align my strategy to that and how can I?
00:05:44 Speaker 3
I elevate myself and my team and our language and our ways of being to align with the need, the strategic needs of the business. So it's more about bigger picture. It's more about the vision and the long term. It is more about the proactiveness and.
00:06:05 Speaker 3
So it's bigger and greater and a lot more impactful and influential than the trusted advisor.
00:06:13 Speaker 2
I.
00:06:13 Speaker 2
That's really well said because I think when I, you know, in my, in my role, I've had the opportunity to interact with a lot of practitioners and a lot of chief audit executives. And when you hear them talk, the number one thing everybody articulates beyond, yeah, they need to have the right talent to address emerging risks is I want to have a seat at the table. I want my board to call me and my audit committee to call me. I want executive management to come to me.
00:06:34 Speaker 2
When there's an issue and so many times when we talk about and work with organizations around revamping their audit plans and working through that, that time for this, these types of activities and reporting on them to the board becomes really incrementally important. And I always say that CAE's that it's honestly a barometer as to whether.
00:06:54 Speaker 2
Your function is performing. If you have people seeking you out for some of the strategic guidance and insight.
00:06:59 Speaker 3
Absolutely, absolutely. Actually, in a recent conference I was speaking and and this was my point to the audience. Like, we've worked very hard throughout our careers and we want a seat at the table, but that seat as the table.
00:07:19 Speaker 3
Doesn't.
00:07:21 Speaker 3
Easily, we have to earn it and we earn it via the quality of the engagement we have with the board, with the, with the C-Suite, with the business and it is reflective of the value that we're adding, the insights we're bringing.
00:07:40 Speaker 3
And how we are supporting them on their mission to run the business?
00:07:45 Speaker 2
So with that, when you know when I think about the first question that comes to mind, if I'm listening, I'm listening to us talk about this. How do I do that? You know, I really want to. I really want to do that. If I'm a practitioner and you know, I want to make this.
00:07:58 Speaker 2
To a problem solver versus a problem identifier. And you know at the end of the day, if you go back and look at internal auditing 2030 forty years ago, one might argue that we were financially driven, you know, all financial statement driven. We were checking boxes. Well, there's a time and place for compliance requirements and I think we all know that.
00:08:18 Speaker 2
How do we do that? How do we make that shift to a problem solver versus an identifier within the organization?
00:08:25 Speaker 3
This is a great question, Mike.
00:08:28 Speaker 3
But for clarification I was not around 40 years ago.
00:08:32 Speaker 2
Nor was I. Nor was I.
00:08:37 Speaker 2
If you walk around the internal audit museum in in Florida, you can see some evidence of these.
00:08:38
Alright.
00:08:41 Speaker 3
Things. Is there an internal?
00:08:44 Speaker 2
Right there is indeed.
00:08:46 Speaker 3
Really. Oh, I did not know that I'd love to come and visit that on my next visit. Alrighty. So, you know, first, let me clarify. There's a a lot of good audit teams out there doing a great job.
00:08:47 Speaker 2
Absolutely.
00:09:01 Speaker 3
- And they I know because I I work at with with so many of them, I know how much heart they pour into their their jobs to deliver the best they can. What we are offering here is a critical mindset shift because this isn't just about doing more.
00:09:23 Speaker 3
Effort, but it's about the intention behind the effort, if that makes sense. So doing that shift is a journey. It is a transformational journey and we need to understand it does not happen overnight.
00:09:40 Speaker 3
So.
00:09:42 Speaker 3
The first step is an exercise of awareness. Where do we stand today as internal audit team?
00:09:53 Speaker 3
If we're being truly objective and auditing ourselves just like we go ahead and audit so many people, let's start by auditing ourselves. Where do we stand on that barometer? Are we engaging with the right priorities? Are we having the right conversation?
00:10:16 Speaker 3
Is the the way we're delivering the Work etc etc. So an honest self reflection and self-assessment is needed. Then the other step is an honest and courageous conversation with the board and the C-Suite and particularly you know the the key decision.
00:10:37 Speaker 3
What is it that they would like to see? They don't always know what they want. You know, the board and the C-Suite in honesty, don't all understand what audit does. And so we might want to educate them, but we also.
00:10:58 Speaker 3
Want to make sure we're asking them that question and engaging.
00:11:02 Speaker 3
So that we get a clarity between our self-assessment and understanding what they want and where would we aspire to be in terms of business partner. Then we create a bridge from now to there and a series of actions would need to be taken. As I said there is a.
00:11:21 Speaker 3
A mindset shift that is needed. It's all about, you know that that change is all about the behaviors within internal audit. And so that takes time and it needs to be taught. It's about setting new values for the function.
00:11:36 Speaker 3
And then we need to reflect and accompany that with changes in the way we work, what we focus on, how do we deliver, how do we communicate? How do we engage, etcetera, etc. How do we report what you know, what documents do we send? What language do we use? How do we behave?
00:11:56 Speaker 3
All that stuff.
00:11:58 Speaker 3
So it is a transformation journey. And on that journey there will be some challenges. There will be some setbacks, there will be some great wins and eventually the cumulative effect the team will gain the experience and will get there and sometimes if needed there are experts and mentors.
00:12:19 Speaker 3
You know that can help on that journey as well.
00:12:21 Speaker 2
Absolutely. And I think that's I think that's really well said. You know the other thing that you articulated and yeah, I think it's spot on is that boards and audit committees and executive management, they they don't they know directionally sometimes what they're looking for, they know where their business objectives and priorities are. But very commonly whether it's about reporting or about their focus areas.
00:12:38 Speaker 3
Yes.
00:12:43 Speaker 2
They really need us to manage upwards in those areas. I think I've, yeah, I I find very that it happens with a significant amount of frequency that if asked directly.
00:12:52 Speaker 2
You're not getting as clear of an answer as if you had just given some insight into where you think in the focus areas and you know with that said, just to dovetail into another piece of this conversation, the chief auditor is only as good as the team that they surround themselves with and when and when we think about strategic advising.
00:13:12 Speaker 2
And that might that might sip shift, you know someone that you know I was, I was a CA for the better part of a decade before I went out on my own and I.
00:13:20 Speaker 2
I would tell you that that is one of the hardest things to recruit for. So when you think about attributes of you know what to look for in candidates and what skill sets and competencies that you think you need, how do you do that as a chief auditing? How do you find the right people to support this goal?
00:13:34 Speaker 3
I would agree with you that it is hard. I was a chief audit executive also for you know well, you know well over a decade before I started by myself.
00:13:46 Speaker 3
Well, and what I always recruited for the way I recruited, I never focused on this. The skills as in the technical skills, I really focused on the attitude and on the competencies. You know, I wanted someone that had.
00:14:06 Speaker 3
The flexibility of mind, the willingness to learn, the curiosity to ask questions, and the courage to change.
00:14:17 Speaker 3
And I.
00:14:19 Speaker 3
Personally recommend that we give as auditors the priority for the attitude and the ways of thinking of our talent, because it's very easy to teach someone. OK? OK. It's not an overnight job, but it's relatively easy to teach someone how to combat the test or, you know, they can build some specific.
00:14:40 Speaker 3
Technical skills and you know, with the right support, they can learn to do XYZ task, but you can't really teach some.
00:14:48 Speaker 3
On willingness and you cannot really teach someone's courage. You know, they they. They've got to really want that. You can't teach someone how they wouldn't, you know. You know, the desire to make a change. So I would say it's very important to recruit based on values.
00:15:08 Speaker 3
And your recruit? People who really aspire to be, to make that, to make that.
00:15:13 Speaker 3
Change. You know, there are certain attributes that are needed in that. Of course I'm going to take it for granted. The technical skills, you know, typically no one's going to come and apply for an audit job if they didn't have the audit training and the audit experience or the audit interest. So yes, we take that for granted, but then.
00:15:33 Speaker 3
We also want above that.
00:15:37 Speaker 3
The ability to communicate and to communicate very well. We want someone who's going to be able to build the relationships in the business. You want someone who's able to debate in a constructive way because there's a there is a lot of conversations that need to be had to be had and.
00:15:56 Speaker 3
You know the the agility and the comfort.
00:16:01 Speaker 3
We as auditors in the you know when engaging in different things, especially when you know problems or different of opinions arise you know can come under extreme pressure from the business you know to change this or to change that. And sometimes the change is needed, but sometimes there is.
00:16:21 Speaker 3
No need to change and so you need to have someone who can handle those tough conversations who can be.
00:16:28 Speaker 3
Brilliant. Who can be confident. And I also believe humor is a is a is a great factor. It helps because sometimes we need to learn how to diffuse things without taking it personally or without taking it too much to heart.
00:16:45 Speaker 2
Really well said. I you know, I this is very similar to my strategy when I when I hire I I I have always been of the mindset that yes, you need some baseline level of technical skills, but it's a lot easier to train someone and make them an expert in.
00:16:59 Speaker 2
If you're doing quality assessments with standards or a quality program or cyber security auditing, you can. Those are trainable skills developing emotional intelligence, influence skills, negotiating skills, the personal ability of a person. These are things that are a lot harder to it's almost an X Factor, and if we take a step back and we think about.
00:17:20 Speaker 2
Where our profession is going, and from a practitioner lens, what's needed to accomplish our goals, we're in a really difficult position as internal auditing. It's it's also what makes it very exciting is that we're in a place where we are looking at the whole business holistically and strategically.
00:17:34 Speaker 2
Evaluating things, whether it's strategic projects or assurance based projects based on risk and we have to help influence change within an organization without actually having any direct oversight over that area. When you think about things like the three lines of defense model, we're we're not a first line person.
00:17:49 Speaker 2
We.
00:17:49 Speaker 2
Don't have authority to own some of those. Some of those areas.
00:17:53 Speaker 2
We do have to influence change and.
00:17:56 Speaker 2
To your point that those requisite skill sets around the personality traits and humor and all those things that help influence decision making, I mean it's it's a very hard thing to train, and if the person doesn't have it, it's takes them a very long time to develop.
00:18:11 Speaker 3
Absolutely.
00:18:13 Speaker 3
I have said that many times before and I'll say it again, the audit profession is probably the most misunderstood in the world, and perhaps one of the hardest because to be a successful auditor, one must master a variety of skills that are not always.
00:18:36 Speaker 3
Present in the same.
00:18:37 Speaker 3
Person you know it, it is very important to be obviously analytical and and you know and be able to follow the details through and look at the those things at the same time. It's very important to be able to see the to rise above that and see the big picture. It is important to.
00:18:57 Speaker 3
Be a great communicator and you know, articulate thoughts and ideas and issues and you know very clearly and confidently and also you have to be a problem solve.
00:19:11 Speaker 3
And you have to be a negotiator and you have to be a translator because you gotta translate all those complex thoughts and concepts into a simple, easy to user friendly reports and conclusions. And you have to kind of sum up vast amounts of information.
00:19:31 Speaker 3
You've looked at in the weeks during the audit into like a few pages and you got to be a fantastic salesperson because you got to sell your ideas and.
00:19:42 Speaker 3
All in all.
00:19:43 Speaker 3
What we do is about spotting the issue.
00:19:47 Speaker 3
Facilitating a solution and influencing change so the influence, communication, dialogue, emotional intelligence, relationship building are all crucial to that piece of the partnership and it helps to know that this is what is expected of us and to kind of.
00:20:08 Speaker 3
Look at how we're performing and look how we can improve and as a cafe, you know, we acknowledge that not everyone on the team might be the perfect match of this. Realistically, these people are minority, they're not the majority and so.
00:20:26 Speaker 3
How you know it's about bringing together the different parts of the team to collaborate together on those audits where they can supplement each other's skill. But under that umbrella of the influence and the partnership, you know, with the relationship building.
00:20:43 Speaker 2
Really well said. I one thing that listeners always like to hear are the more tactical, you know, practical things and you know, one thing I was curious about just because it sounds like you've you've been really successful in your career of implementing these types of changes within audit functions.
00:20:57 Speaker 2
Do you have any, you know, any real life examples of, you know, when you influenced A strategic decision or help to shape an organization in the direction and maybe like what what that organization looked like before some of these steps were implemented and then what the outcomes were after that was put in place?
00:21:14 Speaker 3
Of course, lots and lots and lots and lots of examples I've been, you know, I've been on a journey and I've transformed audit into a strategic partner in three different organizations where our CA E and I currently have many of my clients to do exactly that.
00:21:30 Speaker 3
And.
00:21:31 Speaker 3
Let me give you an example of from my own personal experience and one from a client so you know.
00:21:39 Speaker 3
When I started my very first CEO role and I arrived in, you know, in my job excited about my new job. Soon I discovered that the feedback from the business was rather terrible.
00:21:53 Speaker 3
You know that. You know, I'd go into meeting introducing myself as the, you know, the the new leader and how lovely to meet them, et cetera. And I was faced with so much resistance, things like, you know, what is what is order for you guys only borrow our watch to tell us the time.
00:22:14 Speaker 3
I can't believe the company pays money for this etcetera, etcetera. And then like there were reports, you know, three years worth of audit actions that had not been implemented, there were a lot of pending reports that had not been issued, etc.
00:22:31 Speaker 3
And through a very much like I shared with here an exercise of an honest dialogue with the team and an honest dialogue with the board. And obviously because I was coming new, I was able to be very objective of what's going on there and set a certain priorities and take the actions.
00:22:50 Speaker 3
In terms of changing the way that we're working with the business, changing what we're focusing on, changing our reports, changing the approach, training, the team, etcetera, etcetera.
00:23:02 Speaker 3
The transformation was, you know, slowly but surely remarkably different, and we stepped up into being that trusted and respected strategic business partner within about a year, the CEO would was calling me for.
00:23:22 Speaker 3
You know, we had a big issue in the supply chain, for example, and it was my internal audit team who was able to pinpoint where was this problem or where exactly is it.
00:23:33 Speaker 3
And you know, whereas the rest of the business couldn't, so we had built the credibility and the bridges and a real depth of the business that we could add value, PwC for example reduced at the time it was OK to rely on internal audit work. I think the rules have changed since then but reduced their fees by 25% based on the work that we've done. And then I went on to do that.
00:23:55 Speaker 3
With other businesses, as I said, and you know a client about a year ago, I was working with them. We're also facing a lot of challenges.
00:24:03 Speaker 3
Is, you know, this gentleman had inherited a function that had a long history of conflict and a perception of being in a non value adding team and slowly but surely by working on their communication, their approach, their focus, we change things around.
00:24:24 Speaker 3
And within a period of few months, he started to see quite a bit of difference, but by about a year the difference was remarkable. I would like to remind our audience here that first and foremost audit is about people. I'm very excited about AI.
00:24:42 Speaker 3
And I'm very excited, you know, about what AI could bring. And I've always been a huge champion of analytics. I love technology, but I cannot emphasize enough that we cannot just come and layer some form of technology on something that is broken. We've got to get the basics right and the foundations.
00:25:02 Speaker 3
Provide in an internal audit.
00:25:04 Speaker 3
Function and those foundations revolve around people. We are people we are working with people. The board are people and all the things that happen in day, day-to-day to day life are only kind of amplified in an audit environment because of the inherent nature of our work. Where we point out, you know.
00:25:24 Speaker 3
Issues. This is our job, you know, to be able to identify the risks so that we can help the business evolve. And so it's so important and crucial.
00:25:34 Speaker 3
That we remember. We remember that and that would be a key ingredient in how do we become a strategic business partner.
00:25:41 Speaker 2
And when you think about some of those examples, and I think those are really good tactical and practical things that our audience could take and start deploying, what are some of the things you've heard from management in this part of the process? Because I have to imagine.
00:25:54 Speaker 2
Executive leadership and the Audit committee are crucial either detractors or advocates in this process, and you know, I I would say in my personal experience in my career, I've encountered two different types of stakeholders, those that are understand the value of internal audit and are very.
00:26:10 Speaker 2
Supportive. And then those that are maybe just haven't been, haven't fully understood it and still think of it as a very transactional style of of auditing, yeah, sort of the police mentality. What were some of the barriers that like that you encount that you maybe encountered when you tried to implement some of these things and then?
00:26:28 Speaker 2
What are some of the ways that you've overcome them?
00:26:31 Speaker 3
Sure. What you said is absolutely spot on. That's my experience too and actually.
00:26:36 Speaker 3
There's, as I said, a lot of people who still don't understand what internal audit does.
00:26:41 Speaker 3
So the challenges some from previous experiences they have had. OK, so you know, in an apple card, you're going to get different kind of apples. You're gonna get a a bad apple and every card typically, you know, internal audit is a reflection of the wider population. You're gonna have some brilliant, awesome people and less.
00:27:01 Speaker 3
1000 people, just like in it or in sales or in finance or any other profession.
00:27:06 Speaker 3
And given the nature of what we do, so if you're not doing a brilliant job at it, you could leave quite an impression. Not the impression we desire. And so if, as a chief audit leader, you're engaging with them.
00:27:22 Speaker 3
With an executive or with a board member who have had a terrible experience with audit before, they are without a doubt going to resist you.
00:27:32 Speaker 3
You know, I've. I've seen that time and time again and but but it's so rewarding when you turn the relationship around, but things like you don't add value. You know, what is this about you? You know, I remember perfectly when I was younger, I used to get that a lot, you know, you were younger than my daughter. Do you think you're going to tell me how to do business?
00:27:54 Speaker 3
So.
00:27:55 Speaker 3
You know you're not an IT person. Since when does the audit think they know marketing? I don't think strategy is your area. You know, you got a lot of that. Right. And then you got more silent resistance. You know, like you might not get a budget or.
00:28:15 Speaker 3
You know little games like that or, you know, they might cancel the meeting. And I know because I do coach and mentor, different audit professionals that some of them occasionally I I I I feel great for. I never had that maybe because I sat very healthy boundaries.
00:28:35 Speaker 3
But I do know that people are getting.
00:28:39 Speaker 3
Disrespect and things like that, which is probably a topic for another podcast.
00:28:44 Speaker 3
So the resistance is there either in your face or more silent now that makes.
00:28:51 Speaker 3
The task more challenging, but it's also, as I said, a lot more rewarding when you turn it around.
00:29:00 Speaker 3
Let the quality of your work speak for you. Let your team speak for you. Let the way you present in those key moments of truth when you're presenting to management or presenting at the board, speak for you so there is no point in sitting and like defending someone else's actions. Take.
00:29:20 Speaker 3
Full ownership of your own action rise to the challenge and deliver. Does this resonate, or would you like me to be more specific, Mike?
00:29:28 Speaker 2
No, I think that was well said. And candidly, I think that I don't think we could end on a better note. Yeah, that was that's exactly when I think about our the strategies and how we need to be more strategic partner.
00:29:39 Speaker 2
And if I'm a practitioner looking to deploy some of those things, you know, I think that really gives them a tactical road map of how to, you know, how to how to proceed. Well, Rona, I just want to take a moment and say thank you for being on the all things Internal Audit podcast. It was a pleasure having you and we look forward to having you back again soon.
00:29:55 Speaker 3
My pleasure. The pleasure is all mine, Mike.
00:29:59 Speaker 1
Hey, audit pros ready to supercharge your skills and connect with the best in the field? You absolutely need to check out the IRA's 2025 international conference happening July 14th through the 16th in Toronto and virtually this is your chance to dive into emerge.
00:30:15 Speaker 1
Risks cutting edge tech and global best practices that will elevate your internal audit game don't get left behind and register now at the iaa.org.
00:30:25 Speaker 1
If you like this podcast, please subscribe and rate US. You can subscribe wherever you get your podcasts. You can also catch other episodes on YouTube or at the iaa.org that's theia.org.
