IT Audit And Compliance Specialist Interview Questions And Answers

Be prepared to discuss your previous compliance experience. If you do not have previous experience as a compliance officer, perhaps because you are switching careers, discuss transferable skills. Keith Darcy, executive director of the Ethics & Compliance Officers Association says that "the most important skills include leadership, writing, public speaking, ethical decision-making, communications and training and instructional design." He goes on to say, "compliance officers should also possess a high degree of courage and integrity due to the confidential nature of the job."

Under the United States Sentencing Commission Compliance Recommendations, (§8B2.1(5) (C) of the United States Sentencing Commission Guidelines), an effective compliance program means an organization has taken appropriate steps to ensure laws, rules and regulations are complied with and ethical conduct among employees is promoted. This question tests your knowledge of the requirements of the law governing effective compliance programs.

This is a modified "behavioral analysis" question. If your candidate suggests a response that minimizes consequences, this could indicate an ethical tone that's incompatible with your organization.

Speak about specifics that relate to the position you are applying for. If you do not have specific experience, get as close as you can.

If you are being asked this question from your employer then you can explain your experience. Tell the employer what responsibilities you were performing during your job. You can tell what programs you developed and what modules you worked on. What were your achievements regarding different programs.

I have been working with computers since 2001. I also have a degree in network support/computer repair. I have built my last 3 computers, have work with Dell as an employee. So I have around 15 years experience working with computers.

An auditor does not necessarily need to be a shoe polisher to audit shoe polishing. The same applies to lawn mowing. Candidates often panic when they hear a question about auditing a process that they are not familiar with. A true feature of a true auditor is the ability to identify risks associated with the process.

Every process that requires auditing has common elements, be it lawn mowing or petrochemical refining. For example, the common features across multiple processes might be:

► Preparedness / Planning / Scheduling. Processes have to be properly planned in terms of resources, capacity, scope and timing.
► Efficiency and Effectiveness - attempts to minimizing costs and optimizing materials. Doing things rationally and technically right.
► Quality - doing things right from the first time with minimal waste, plus, fitness and conformance to specifications of a final output/product including tolerance for defects.
► Technology - equipment and tools being physically and technically fit, tidy, clean and ready.
► People - right people must do the job.
► Safety - maximum alertness to hazards, their risks, deficiencies, and damage to people, equipment/materials and surroundings.
► Rules - legal requirements, operational procedures, organizational policies and codes.
► Cost-benefit. Is this process needed, do we get maximum benefit out of the costs we incur. Is it financially viable?
► Correctness - are all above things being done correctly and accurately?
► Fraud - are there opportunities, reasons and justification for thefts, burglary, misappropriation and embezzlement?
► Others - You name it.

This is a general question and could be asked of any applicant irrespective of the industry. Be prepared to answer it well. As a first step, take the time to research the company at which you are interviewing. Do not miss this opportunity to make a good impression by showing how knowledgeable you are about the company's operations.

Your candidate has already dealt with some kind of C&E issues on the job - unless he or she hasn't been paying attention. Always ask this question because it highlights issues the candidate might have been unaware of or had not fully appreciated. A compliance officer is supposed to constantly assess risk, so find out what issues they had to deal with as a way to determine their risk management style.

Furthermore, this question can help assess how well the candidate applies corporate policies in the context of their role, and it can highlight the effectiveness (or lack thereof) of whatever training they have had.

Thirdly, this question can give you an idea of how sophisticated the compliance program is in their current organization and can indicate how directly they are involved in implementing it.

Note: Interviewees frequently struggle with this question. Prod them with an obvious example of a challenge they may have faced.

This question evaluates a professional's resilience, creativity, collaboration and influencing skills.

This question provides information on several important aspects of a compliance program. First, it may highlight risks that the compliance officer was unaware of or didn't fully appreciate (risk assessment). Second, it assesses how well employees are able to apply corporate policies in the context of their role (policy comprehension/retention and training effectiveness). Third, it reiterates and reinforces the employee's understanding of risks and policies specific to them (training). Interviewees frequently struggle with this question initially and the interviewer may need to provide an obvious example of such a challenge to help the interviewee get started (i.e. gift policy, etc).

Try to include improvement activities that relate to the job. A wide variety of activities can be mentioned as positive self-improvement. Have some good ones handy to mention.

Employers look for applicants who are goal-oriented. Show a desire for continuous learning by listing hobbies non-work related. Regardless of what hobbies you choose to showcase, remember that the goal is to prove self-sufficiency, time management, and motivation.

Everyone should learn from his mistake. I always try to consult my mistakes with my kith and kin especially with elderly and experienced person.

I enrolled myself into a course useful for the next version of our current project. I attended seminars on personal development and managerial skills improvement.

Believe it or not, internal auditors can cause trouble. Anything that designed to bring benefit, can cause problem if misapplied. From experience, the problems that were absent in the absence of Internal Audit and have emerged due to having Internal Audit(or)units, are mainly:

A) Fear in employees due to the feeling that they will be punished for their minor deficiencies. This is a misconception. However, it affects employee morale and psychology, thus performance.

B) Internal auditors may recommend something wrong with the believe that it will fix the current deficiency.

C) Management will be relaxed and will have a loose attention and weakly disciplined self-check environment for matters related to risk, control and fraud because of too much reliance on internal auditors. Oftentimes, managers think that internal auditors will highlight all their problems.

This is an ethics question, and the employer wants to know you respect the ethics codes of the company and can be appropriately tough when needed. Answer this question by letting the employer know you are prepared to fire an employee who violates the company's code of conduct depending on the severity of the violation, and if appropriate, you are prepared to pursue criminal prosecution.

Acceptable answers here could be work-related or non-work-related. We have all had our character tested.

► Tell me about yourself?
► Why did you leave your last job?
► What kind of salary are you looking for Compliance specialist?
► Why should we hire you as Compliance specialist?
► What are your career goals for Compliance specialist?
► What do you think are the most important skills in succeeding in sales?
► Sell me this pen?
► How many years of experience do you have for Compliance specialist position?

► Why are you interested in this role and how would you add value to the team?
► Why this firm and not another organization?
► What are your long-term career aspirations?
► What projects have you been involved in?
► What are your dealings with the financial regulators?
► How have you been involved in the development of policies and procedures? What do you think are the key compliance challenges for this type of business in the current climate? (This question, in particular, is coming up quite a lot for compliance roles)
► In the first 30 days on the job, what would you expect to achieve?
► How would you deal, or have you dealt, with difficult employees or situations?
► Have you ever experienced a situation where something has gone wrong for you or a team that you were part of in compliance? What did you do to fix it? What did you put in place to ensure that it didn't happen again?
► In your current role, what wouldn't have been achieved had you not been there?
► If one of your former line managers were to describe you, what would they say? Would they highlight any weaknesses?

§8B2.1(5) (C) of the USSGs requires that an organization have and publicize a system whereby employees can anonymously or confidentially report or seek guidance about potential or actual criminal conduct without fear of retaliation. Responses to this question can help a compliance officer assess the effectiveness of their hotline or other reporting system publication efforts. It may also help the compliance officer assess employees' knowledge of the organization's policy regarding employee complaints (i.e. first report to supervisor, etc.) and any training that was conducted regarding such a policy. This question can also be used to explore employees' perceptions about the credibility of the organization's non-retaliation policy.

Here, the main idea is to pinpoint your coaching, teamwork and supervisory competences. You may have different set of 5 qualities for different groups. Although it is not asked in the question, an interviewee should also focus on telling how is he or she going to deliver and achieve the objective of improving auditing qualities for those juniors.

Always ask this. If the candidate cannot clearly state what his or her value proposition is, you must move on to someone who can.

No one understands the intricacies of a person's role better than the person who performs it. This question challenges the candidate to think about compliance policies and internal controls from the perspective of someone seeking to violate or circumvent them. That's a skill you need on your team, so listen closely here.

This is one of my "black hat" interview questions. Nobody understands the intricacies of a person's role better than the person who performs that role - particularly if they have performed that role day after day for some length of time. This question challenges the employee to think about compliance policies and internal controls from the perspective of someone seeking to violate or circumvent them.

To elicit effective responses often requires the interviewer to enable the interviewee to disassociate himself/herself from their role. Responses to this question may help the compliance officer understand and assess the effectiveness of internal controls in preventing and detecting compliance violations.

Additional knowledge is never harmful. Knowledge of using electronic resources and programs for audit purposes is always appreciated.
However, some great internal auditors have never used specialized audit programs such as ACL, TeamMate, IDEA and CaseWare. This does not mean these professionals have got no answer to this question. The hint is hidden in the question itself. The interviewer did not specify ACL, IDEA and so forth, nor did she mention the word "audit software".

So, you can use various computer resources and programs to aid you with your audit assignments. Professionals with strong Microsoft Excel skills do not need to use most of the specific commercial analytical programs. Internal auditors hugely benefit from web-based programs, search engines, databases, HTML, Mathlab, Oracle, Microsoft Access, Visual Basic, Business Objects and even Paint.

So, this question actually gives you an opportunity to speak about your practical computing skills. I always mention the application of HTML and Crystal Ball to audit and control. Furthermore, many of those so-called "audit software" are "management" software, they help you with document management and organization. Do not expect that you will lay back, and they will do the audit for you. Others simply are "made-easy" analytical programs that you can substitute with your free packages as long as you possess strong programming (not always) and spreadsheet data analytics skills. Sometimes, you purchase a program that you never use.

Compliance policies should be accessible to all employees, well communicated, and easy to understand and apply. Responses to this question can provide valuable end-user feedback in this regard. The additional area of "enforcement" may provide some insight into an organization's ethical tone and employee perceptions about fairness and equality. A quality compliance program will assure that all violators are treated fairly, but equally. If employees perceive that management or others are "above the law," the compliance program loses credibility.

You may say that you thrive under certain types of pressure. Give an example that relates to the type of position applied for.
Mention pressures you face on the daily, such as dealing with deadlines on a regular basis.
Try not to use an example where you created the pressure yourself, by waiting too long to start something, or by handling a task irresponsibly at the beginning. For example, working under pressure to meet a customer's deadline could be a good example, but not if you had waited too long to start the project.
"Pressure is actually a catalyst to my work. When there is an imperative deadline, I refocus my energy into my work which in fact, has helped me to produce some of my best works. (Give examples) I guess you can say I thrive under pressure."

There are federal and state so-called "whistleblower laws." Whistleblower laws protect an employee who reports violations of various laws by other employees from retaliation. This question is designed to test your knowledge and awareness of these statutes.

Compliance departments are rarely adequately staffed. This will tell you how creative and resourceful the individual is, and how committed to performing above expectations.