Alan Johnstone Email & Phone Number

Edinburgh, Scotland, United Kingdom

Edinburgh, Scotland, United Kingdom

United Kingdom

I am a highly experienced and long qualified Chartered Internal Auditor, with over 25 years experience of public sector internal auditing. I have a wealth of experience, including corporate governance, risk management, stakeholder management and a significant understanding of data analysis tools employed within IA.

Brief assignment providing EC related audit consultancy advice to Low Carbon Support Unit

Edinburgh, United Kingdom

Mamhilad, Monmouthshire, United Kingdom

Glasgow, United Kingdom

I am currently working for the Scottish Government Internal Audit Directorate on a contract basis, an initial four month contract which has been extended on several previous occasions, currently up until the end of September 2018.I am working as an Internal Audit Business Relationship Manager for a number of SG Executive Agencies and other SG related bodies, as well as providing advice and guidance on the developing use of IDEA software within SG.

Edinburgh, United Kingdom

1. Undertook a review of the FC Internal Audit function, against HM Treasury's Internal Audit Quality Assessment Framework.2. Development of a Corporate Assurance Map for Forest Enterprise England.

Carlisle, United Kingdom

1. Creation of the 2014-15 Governance Statement for NE, which was then included within the Annual Report and Accounts. Reporting to both the Director of Finance and to the Audit Risk and Assurance Committee.2. Development of a Corporate Assurance Map for Natural England, reporting to Director of Finance as well as the Audit Risk and Assurance Committee3. Oversight of the contract between NE and KPMG for the delivery of Internal Audit by KPMG from 1st Jan 2015. Included revisions to the Audit Charter, joint development of an Audit Plan with KPMG for the financial year 2015/16, the completion of the Audit Plan by KPMG for 2014/15, the joint production of the HIA Annual Report for 2014/15.4. Management of NE's first ever involvement in the National Fraud Initiative

Home-Based

1. Management of the contract between NE IA and the external audit providers;2. Delivery of key audit assignments3. Production and revision of the Audit Plan in conjunction with the HIA4. Attendance with (or deputising for) the HIA at the Audit Risk and Assurance Committee, in relation to papers on IA progress, Assurance mapping, Management Action tracking.

1. Management of a team of Internal Auditors, delivering audits throughout the UK on a variety of Commission activities.2. Developing and managing the audit plan for all audit activities in the Commission, as part of the Senior Management Team, including the identification of appropriate resources and skills amongst the audit teams. 3. Creating and managing activity in support of key stakeholder relationships. 4. Lead auditor for risk based auditing of several key business areas within the Commission at offices throughout the UK, including the stakeholder management aspects of each review, as well as mentoring and reviewing the work of auditors.5. Deputising for the Head of Internal Audit at meetings of key governance bodies within the Commission, including Audit and Risk Committees.

1. Overseeing the certification of European grant funding programmes, valued overall at around £500 million. Successfully developed an audit methodology and a communications process to manage the project, and achieved the successful completion of the project within the regulatory deadline of March 2010.2. Deputising for the Head of Internal Audit at Audit and Risk Committee meetings and meetings of other similar governance bodies.3. Creating and managing activity in support of key stakeholder relationships.

1. Creation and management of teams of Internal Auditors in the North of England, delivering audits at several geographically spaced offices and for a variety of Agency activities.2. Developed and managed the audit plan for all audit activities in the Agency’s Northern Offices, including the identification of appropriate resources and skills amongst the audit teams in the North of England. 3. Creation and management of activity in support of key stakeholder relationships. 4. Lead auditor for risk based auditing of several key business areas within the Agency at offices throughout the UK, including the stakeholder management aspects of each review, as well as mentoring and reviewing the work of auditors.5. Lead auditor for a number of reviews within other Agencies within DEFRA and within other Government departments to review control arrangements over multi-million £ European grant funding schemes. 6. Deputising for the Audit Managers at meetings of key governance bodies within the Agency.7. Provision of risk and control advice, including CRSA seminars.

1. Risk based auditing of several business areas within the Agency (including Operations, Finance, IS and HR) at offices throughout the UK, including the planning, risk evaluation, testing, report writing and report presentation elements of each review.2. Review of the Agency’s Control Environment and Risk Management approach.3. Review of Risk Management within the Agency’s (multi-million £) Change Programme. 4. Significant role in the Internal Audit Unit’s EFQM based self-assessment and Quality Audits.5. Consultancy work undertaken at management request for the extraction and interrogation of data to replicate business rules that could not be employed within the Agency’s computer application. 6. Attendance at Change Programme Project Board meetings for system development to provide advice on risk and governance issues.7. Provision of risk and control advice, including involvement in CRSA seminars.8. Co-ordination and supervision of staff on larger audit assignments.

♦ Audit planning, both strategic and assignment planning; Co-ordination and supervision of staff on larger audit assignments; Recruitment, training and development of junior staff, including the review of work undertaken; Audit report writing and subsequent presentation to Councillors, Management Team, Managers.♦ Use of (and training of other staff in the use of) CAATs, in particular IDEA, though with additional and similar use of Microsoft Access; Additional skills obtained in mechanisms for data downloading, such as ODBC, from all forms of systems (e.g. UNIX, Oracle, Access, Excel, Dbase)♦ Advice to Project Boards; Value for Money/Performance review studies; Systems based audit of all major functions of the City Council and many other of the wide variety of functions undertaken by a District Council; Best Value reviews of Service Themes♦ Computer audits of UNIX based and Windows NT based IT applications and audits of other IT resources, such as networking and the Internet.♦ Contract based audit of major Council contracts, both service and construction, such as the service contract for Refuse Collection. ♦ Investigations of internal fraud and theft allegations