Risk and Assurance Lead

Nuffield Health is the charity that's building a healthier nation, one day at a time. From award-winning hospitals and fitness facilities to flagship community programmes - we'll do whatever it takes to look after the UK's wellbeing. It starts with passion and commitment to quality. It starts with you. As a Risk and Assurance Lead, your primary responsibility is to own and deliver the Charity's Internal Audit Programme, providing clear, practical assurance over how well key risks are being managed and whether internal controls are operating as intended. The role sits within our Legal team and works across hospitals, fitness and wellbeing sites, and central functions. Reporting to the Head of Risk and Assurance, you will plan, deliver and report on internal audit activity, using audit insight to strengthen governance, risk management and internal control. This is a high-profile role requiring credibility and hands-on expertise in internal audit, controls and risk assurance. You will work closely with senior stakeholders, risk and control owners, and external auditors to deliver assurance that supports effective decision-making by the Executive Committee and Board Audit & Risk Committee. As Risk and Assurance Lead, you will:

• Own and deliver the Internal Audit Programme, including planning the annual programme, carrying out reviews, and ensuring audit work is risk-based, proportionate and adds clear value.
• Undertake internal audit reviews, testing how key controls operate in practice, identifying weaknesses, and agreeing practical, affordable improvements with management.
• Track and follow up audit actions, supporting risk and control owners to embed and sustain improvements.
• Provide clear, timely and evidence-based reporting on audit findings, themes and control effectiveness to senior management and governance committees.
• Use audit insight to inform wider risk management activity, including principal and emerging risk discussions.
• Build strong working relationships with risk owners, senior leaders, and external auditors to strengthen the overall control environment.
• Contribute to the ongoing development of the risk and assurance framework, ensuring it supports effective assurance and reliable reporting.
• Support related risk activity, including:
+ Maintaining the Emerging Risk Register and horizon scanning. + Developing and interpreting Key Risk Indicators (KRIs). + Promoting a risk-aware and assurance-focused culture across the organisation.


• Proven experience in delivering Internal Audit reviews, including control testing and reporting.
• Strong understanding of internal control, assurance and risk-based audit planning.
• Experience of applying risk frameworks and using assurance to support decision-making.
• Confidence engaging with senior stakeholders and challenging constructively where controls are not effective.
• Ability to analyse complex issues and communicate findings clearly and plainly to senior management and boards.
• A practical, solutions-focused mindset and attention to detail.
• Experience of working in complex or regulated organisations (health, wellbeing or charity environments desirable).
• Experience with risk or assurance systems/tools (desirable).
• Experience of emerging risk assessment, horizon scanning or KRIs (desirable).
• Experience of clinical risk or regulated environments (desirable).
  
  We want you to love coming to work, feeling healthy, happy and valued. That's why we've developed a benefits package with you in mind. Here, you can choose from a range of fitness, lifestyle, health and fitness wellbeing rewards, such as free gym membership, health assessments, retail discounts and pension options.