Identify the engagement, not merely the employer
Internal audit can examine risks, controls and governance across an organization. External financial-statement audit examines financial reporting within its applicable framework. The IIA describes the first remit; PCAOB AS 1000 describes objectives for audits conducted under PCAOB standards. External audit is not one universal worldwide framework, and the two kinds of work can both involve controls.
An accounting firm may perform outsourced internal-audit work. A company may employ its own internal-audit team. A risk-advisory title may refer to a different service again. Ask what engagement or process the vacancy supports rather than classifying it solely by whether the employer is a public accounting firm.
For an intern, the useful question is which workpaper or procedure you will help prepare and who reviews it. Neither an internal-audit internship nor an external-audit internship gives a student authority to issue an opinion.
Use the complete ten-invoice exercise
Original fictional policy: a supervisor must approve an invoice over $5,000 before payment. You receive the following ten records, all above that threshold. You do not know how they were selected, and the file has no payment timestamps, approver identities or underlying approval documents.
| Invoice | Amount | Approval reference |
|---|---|---|
| INV-001 | $7,200 | APR-001 |
| INV-002 | $8,500 | APR-002 |
| INV-003 | $6,400 | Missing |
| INV-004 | $12,000 | APR-004 |
| INV-005 | $9,100 | APR-005 |
| INV-006 | $5,800 | Missing |
| INV-007 | $7,600 | APR-007 |
| INV-008 | $15,400 | APR-008 |
| INV-009 | $6,300 | Missing |
| INV-010 | $11,200 | APR-010 |
Your initial procedure is deliberately narrow: identify whether each supplied record contains an approval reference. Preserve the input file and record the population actually supplied. Do not silently remove rows with missing fields or describe this as a test of every invoice in the organization.
Write the result the evidence actually supports
The missing-reference records are INV-003, INV-006 and INV-009. That is three of the ten supplied records. The associated invoice amounts sum to $18,500; all ten invoice amounts sum to $89,500. Those totals help reconcile the exception list, but they do not measure a population-wide failure rate or establish fraud.
A suitable result is: “Three supplied records lack an approval reference. The other seven contain a reference, whose validity, authority and timing have not yet been checked.” This distinguishes a field-completeness procedure from a complete test of the stated control.
The missing references might reflect documentation elsewhere, an incomplete export, an authorized exception or a failure. To distinguish them, request the relevant approval evidence and payment timing through the engagement’s process. Do not choose one explanation because it sounds more decisive in an interview.
Build a workpaper with a review trail
Use five short headings: objective, criterion, evidence, procedure and result. Under objective, state the narrow question being tested. Under criterion, reproduce the fictional approval rule accurately. Under evidence, identify the ten-row input and its limitations. Under procedure, explain the exact completeness check. Under result, list the exceptions and follow-up.
Add preparer, date, version and reviewer-comment fields. A corrected workpaper should not erase the history of what changed. If you later obtain an approval for INV-003, keep the original exception and record the new evidence that resolved it.
Create a separate follow-up table containing invoice ID, requested evidence, response received, interpretation and open question. A note that says “emailed manager” is an action, not evidence that approval existed before payment. The exercise becomes useful when a reviewer can follow that distinction without asking you to reconstruct the story verbally.
Explain the same finding differently in two interviews
For internal audit, discuss the purpose of the process and how you would understand the control’s design and operation. Does the policy identify an authorized approver? Is the system capable of preventing payment before approval, or does someone review afterward? These are questions to investigate, not conclusions supplied by the file.
For external financial-statement audit, discuss why the missing references do not by themselves establish a financial-statement misstatement, its magnitude or materiality. The example provides no sampling plan and no wider engagement context. Under PCAOB AS 1000, reasonable assurance is not a guarantee that every error or fraud will be detected.
In both discussions, explain when you would escalate an uncertainty. A reviewer should hear that you understand the procedure’s limit, not that you have memorized a more dramatic finding.
Sources[2]
Choose a role with a defined learning and review process
Read any accounting-course, degree and graduation requirements directly. A condition about credential eligibility by a future full-time start is different from holding that credential now. Ask about the actual requirement and date rather than applying a general online rule across jurisdictions.
Useful questions include: “What does a complete first workpaper look like?” and “Which revisions do reviewers most often request from interns?” Also clarify client-site attendance, travel and the internship’s actual schedule. These help distinguish a supported learning assignment from a vague promise of exposure.
Keep client material out of public portfolios. Use this synthetic file to demonstrate your method and describe it as an independent practice workpaper. Your next step is to read one posting from each path and identify one qualification you can prove and one process question you still need answered.