Qualification
Chartered Accountant (CA), Certified Internal Auditor (CIA), Certified Fraud Examiner (CFE), or an equivalent professional qualification from ICAP, IIA, ACCA, or any internationally recognized accounting or audit body.

Age Limit:

•     As per the guidelines of the Khyber Pakhtunkhwa Government for equivalent public sector positions. Relaxation, if any, shall be subject to Board of Governors approval.

Professional Experience
Minimum 7 years of relevant post-qualification experience in internal auditing, risk management, or financial controls, with at least 2 years in a leadership or senior managerial role within an internal audit department.

•     Demonstrated experience in risk-based audit planning, compliance audits, and forensic investigations, preferably in a healthcare, public sector, or donor-funded institution.

•     Prior exposure to public sector governance frameworks, MTI or hospital management structures, or KP Government financial rules will be a significant advantage.

•     Proven track record of independent functional reporting to an Audit Committee or Board of Governors, including presentation of audit findings, management letters, and follow-up on agreed actions.

•     Hands-on experience in developing and maintaining Risk Control Matrices (RCMs) and risk registers for complex multi-entity organisations.

•     Experience with forensic investigations, procurement audits, asset verification, and payroll audits in large public-sector or healthcare settings.

Skills and Competencies:

•    Comprehensive working knowledge of internal auditing standards and best practices, including the IIA's International Professional Practices Framework (IPPF) and the Three Lines Model.

•    Expertise in formulating and operationalizing audit charters, risk-based audit plans, risk management strategies, and internal control frameworks.

•    Demonstrated ability to design and implement Risk Control Matrices (RCMs) across key institutional processes.

•    Proficiency in data analytics tools and techniques to enhance audit effectiveness and continuous monitoring.

•    Working knowledge of Hospital Management Information Systems (HMIS) and IT general controls sufficient to plan and execute IT/systems audits.

•    Exceptional leadership, communication, and problem-solving skills, with the ability to engage effectively at Board and senior management levels.

•    Capacity to produce clear, concise, and actionable audit reports with well-supported findings and pragmatic recommendations.

•    Ability to operate independently with high ethical standards, objectivity, and professional scepticism.

Regulatory & Institutional Knowledge:

•    Sound knowledge of the Khyber Pakhtunkhwa Medical Teaching Institutions Reforms Act, 2015, and associated MTI regulations, bye-laws, and governance frameworks.

•    Familiarity with KP Government financial rules, public procurement laws (KPPRA Rules), labour laws, and applicable healthcare sector regulations.

•    Understanding of the Sehat Sahulat Programme (SSP) operational and financial framework, including State Life MoU obligations and billing controls.

•    Awareness of National Accountability Bureau (NAB) and other accountability frameworks applicable to public sector institutions in Khyber Pakhtunkhwa.

Main Responsibilities
The CIA will be responsible for, but not limited to, the following:

•     Lead and manage the Internal Audit Department for MTI KTH, KMC, and KCD, in accordance with the approved Internal Audit Charter.

•     Develop and execute a risk-based Annual Audit Plan, covering all significant operational, financial, compliance, and IT audit areas.

•     Design, implement, and maintain comprehensive Risk Control Matrices (RCMs) for key institutional processes as a priority deliverable within the first six months.

•     Conduct and supervise audit engagements including operational, financial, compliance, forensic, and IT audits and ensure timely reporting to the Audit Committee.

•     Report directly and independently to the Board of Governors Audit Committee on audit findings, risk exposures, and the status of management action plans.

•     Provide advisory/consulting services to management on internal controls, governance gaps, and risk mitigation strategies, without compromising audit independence.

•     Lead or support forensic investigations and special assignments as directed by the Audit Committee or Board.

•     Oversee follow-up on audit findings and ensure timely implementation of agreed corrective actions by management.

•     Build and develop the capacity of the internal audit team through training, mentoring, and structured performance management.

•     Maintain the Quality Assurance and Improvement Programme (QAIP) for the Internal Audit function.

Personal Attributes:

•     Unimpeachable ethical values with a steadfast commitment to transparency, accountability, and the public interest.

•     Strong analytical and critical thinking abilities, with a structured approach to identifying, assessing, and communicating institutional risks.

•     High degree of discretion and professional judgment in handling sensitive, confidential, and politically sensitive matters.

•     Resilience and integrity to maintain professional standards under institutional or political pressure, with the ability to escalate appropriately.

•     Collaborative yet independent outlook able to build productive relationships with management while preserving audit objectivity.

Priority Deliverable – Risk Control Matrices (RCMs):

The successful candidate will be required to treat the development of institutional Risk Control Matrices (RCMs) as an early and priority deliverable. RCMs are to be developed for all high-risk process areas identified in the Annual Audit Plan.

RCMs shall map identified risks to existing controls, highlight control gaps, assign risk ratings, and recommend mitigating actions. They shall serve as a living tool for continuous monitoring and shall be updated on at least an annual basis or following any significant operational or regulatory change.