Risk and assurance services in Glasgow cover areas ranging from internal audit and enterprise risk management to controls assurance, governance reviews, technology risk, compliance and statutory audit. The firms below include independent Scottish practices, national accountancy firms and international professional services networks with relevant Glasgow or Scotland coverage. This guide provides a practical overview of companies and their services rather than ranking them.
Acumon
Acumon is a UK firm of chartered accountants and registered auditors providing risk and technology assurance, internal audit, governance, risk management and external audit services to companies, charities, regulated organisations and international corporate groups. Its UK-wide practice supports organisations across Scotland as well as other parts of the country.
The firm works with organisations ranging from growing owner-managed businesses and charities through to larger corporate groups and regulated entities. Audit engagements are delivered in accordance with International Standards on Auditing (UK) and supported by a structured risk-based audit methodology.
Acumon holds a Public Interest Entity (PIE) audit licence, allowing the firm to audit listed companies and other entities subject to enhanced regulatory oversight in the United Kingdom. PIE audits are subject to additional regulatory supervision and quality requirements, and only a limited number of firms are authorised to undertake this type of work.
In addition to its UK audit registration, Acumon also holds audit licences in several international financial centres, including the Cayman Islands, British Virgin Islands (BVI), Jersey, and Isle of Man. These licences enable the firm to support international corporate groups where entities are located across multiple jurisdictions.
International group structures frequently involve a combination of UK operating companies and offshore holding entities, particularly in sectors such as investment management, technology, energy, and international trade. Coordinating audit work across these structures requires familiarity with cross-border financial reporting and group consolidation processes.
Acumon works with finance teams and boards to support statutory audit requirements while also helping organisations strengthen financial reporting processes, governance arrangements, and internal controls as they grow.
Risk and Assurance Capabilities
Acumon provides risk and assurance services for organisations across a wide range of structures and sectors.
These include:
- UK limited companies and corporate groups
- Public Interest Entities (PIEs) and regulated organisations
- UK subsidiaries of international groups
- charities and not-for-profit organisations
- owner-managed businesses approaching statutory audit thresholds
- offshore holding companies and investment vehicles
Risk and assurance engagements are typically led by senior risk and assurance professionals with direct involvement throughout the engagement.
Regulatory Licences and Registrations
Acumon holds several audit registrations that enable it to support organisations operating across multiple jurisdictions.
These include:
- UK statutory audit registration
- Public Interest Entity (PIE) audit licence
- Jersey audit licence
- Isle of Man audit licence
- Cayman Islands audit licence
- British Virgin Islands audit licence
These registrations allow the firm to provide audit services to groups that include entities in both the UK and key international financial centres.
Core Services
Acumon provides a range of services that support financial reporting and governance.
These include:
- statutory external audit
- group and subsidiary audits
- Public Interest Entity (PIE) audits
- charity and not-for-profit audit
- audit of international group structures
- internal audit and governance reviews
- risk management and compliance support
Audit work is often delivered alongside discussions with management and boards regarding financial reporting processes and governance frameworks.
Many organisations initially encounter statutory audit requirements as they grow and exceed the audit exemption thresholds set out in the Companies Act.
Acumon works with businesses that are:
- approaching their first statutory audit
- preparing for external investment
- expanding into international markets
- operating within corporate group structures
Early engagement with an audit firm can help ensure that financial reporting systems and documentation are aligned with statutory audit requirements.
Contact Information
- Website: acumon.com
- Phone: 020 8567 3451
- E-mail: [email protected]
- Address: 1-2 Craven Road, Ealing, London, W5 2UA, UK
Johnston Carmichael
Johnston Carmichael combines statutory audit with a dedicated risk assurance and internal audit practice. Its risk work covers process and control reviews, internal audit, corporate governance, ESG, third-party risk and technology assurance, while the wider audit team handles financial, group, CASS and pension scheme audits.
The firm has a Glasgow office on West George Street and works with organisations across sectors including financial services, energy, infrastructure, food and drink, technology and life sciences. Its internal audit model can include reviewing the design and effectiveness of controls and developing risk and governance frameworks around an organisation’s requirements.
Key Facts
- Core services: Internal audit, process and controls reviews, corporate governance reviews, technology assurance, third-party risk assurance
- Audit services: Statutory audit, group reporting, CASS audit, pension scheme audit
- Specialization: Risk assurance connected with wider audit and financial reporting work
Contact Information:
- Website: johnstoncarmichael.com
- Facebook: www.facebook.com/JohnstonCarmichael
- Twitter: x.com/JC_Accountants
- LinkedIn: www.linkedin.com/company/johnston-carmichael-chartered-accountants-and-business-advisers
- Instagram: www.instagram.com/johnston_carmichael
- Address: 227 West George Street, Glasgow, G2 2ND
- Phone: 0141 222 5800
PwC
PwC’s Glasgow practice brings together audit, assurance, consulting and cyber security specialists, with particular local experience across areas such as technology, financial services and energy transition. Its wider risk practice includes internal audit services designed around risks affecting people, processes, systems and data.
Internal audit work can involve assessing current assurance coverage, strengthening audit capabilities and helping organisations respond to changes in risk and regulation. PwC also provides broader assurance and controls-related services through its professional services network, allowing engagements to draw on technical specialists when risks cross financial, operational and technology functions.
Key Facts
- Core services: Internal audit, audit and assurance, cyber security, risk and regulatory consulting
- Specialization: Complex enterprise and regulated organisation risk environments
- Relevant sectors in Glasgow: Technology, financial services, energy transition, public sector
Contact Information:
- Website: www.pwc.co.uk
- Facebook: www.facebook.com/PwCUK
- LinkedIn: www.linkedin.com/company/pwc-uk
- Instagram: www.instagram.com/pwc_uk
- Address: 120 Bothwell Street, Glasgow, G2 7JS
- Phone: +44 (0)141 355 4000
AAB
AAB provides both external audit and internal assurance services from its Glasgow practice. Its internal audit offering covers specific risk reviews, outsourced and co-sourced internal audit, risk management work, contract audits and forensic investigations.
Risk management assignments can include developing risk registers and assurance maps, while outsourced internal audit work is structured around risk-based planning, fieldwork and reporting on governance and controls. AAB also handles external and non-audit assurance engagements, giving organisations access to both financial audit and broader operational assurance within the same group.
Key Facts
- Core services: Internal audit, risk management, external audit, contract audit, fraud investigation
- Delivery models: Project-based, co-sourced and outsourced internal audit
- Risk work: Risk registers, assurance mapping, governance and controls reviews
- Office services: Audit and assurance, advisory, ESG, tax and corporate finance
Contact Information:
- Website: aab.uk
- Facebook: www.facebook.com/AABLLP
- Twitter: x.com/AABGroup_
- LinkedIn: www.linkedin.com/company/aab-accountants
- Instagram: www.instagram.com/_aabgroup
- Address: The Gatehouse, Crosshill Rd, Bishopbriggs, Glasgow, G64 2QG
- Phone: +44 (0)141 943 3619
Grant Thornton
Grant Thornton has a Glasgow office and provides audit and assurance alongside a separate Business Risk Services practice. The latter covers internal audit, enterprise risk management, controls advisory, technology risk, data assurance, project and programme assurance, supplier risk and service organisation controls reporting.
This range allows organisations to commission broad internal audit programmes or narrower assurance work around specific control areas. Technology-related services include IT internal audit and technology risk assurance, while controls advisory work addresses internal control environments and reporting expectations.
Key Facts
- Core services: Internal audit, enterprise risk management, technology risk, controls advisory
- Additional assurance: Data assurance, programme assurance, supplier and contract assurance, SOC reporting
- External assurance: Financial audit and wider non-statutory assurance
Contact Information:
- Website: www.grantthornton.co.uk
- LinkedIn: www.linkedin.com/company/grant-thornton-uk
- Instagram: www.instagram.com/gt_trainees
- Address: Level 8, 120 Bothwell Street, Glasgow, G2 7JS
- Phone: +44 (0)141 223 0000
RSM UK
RSM’s risk assurance practice covers internal audit, technology risk, financial services compliance, fraud risk and enterprise risk management. Its approach connects assurance work with the controls used to manage regulatory, operational, financial and technology risks.
The Glasgow office also has audit professionals working with owner-managed companies, family businesses, private equity-backed organisations and larger international groups. This gives RSM a mix of traditional financial assurance and broader risk advisory capabilities, including technology risk assurance for organisations reviewing IT controls and digital risk exposure.
Key Facts
- Core services: Risk assurance, internal audit, enterprise risk management, technology risk
- Additional areas: Financial services risk and regulation, fraud and investigations
- Audit coverage: Corporate statutory audit, assurance and financial reporting
Contact Information:
- Website: www.rsmuk.com
- LinkedIn: www.linkedin.com/company/rsm-uk
- Instagram: www.instagram.com/rsm.uk
- Address: 4th Floor, G1, 5 George Square, Glasgow, G2 1DY
- Phone: +44 (0)141 285 3900
BDO
BDO provides risk advisory services covering internal audit, enterprise risk management, corporate governance, controls assurance, SOX compliance and technology risk. Internal audit work extends beyond financial statements to governance, policies, legislation and the controls organisations use to manage wider operational risks.
Its Glasgow practice provides audit and assurance alongside risk advisory, tax, restructuring, corporate finance and transaction support. The Scottish offices work with owner-managed businesses, private and listed groups, public sector organisations, pension schemes and not-for-profit entities.
Key Facts
- Core services: Internal audit, risk management, controls assurance, corporate governance
- Technology services: Technology risk and cyber-related advisory
- Additional assurance: SOX compliance and third-party assurance
- Client types: Private businesses, listed groups, public sector bodies and not-for-profits
Contact Information
- Website: www.bdo.co.uk
- LinkedIn: www.linkedin.com/company/bdo-llp
- Instagram: www.instagram.com/lifeatbdo
- Address: 2 Atlantic Square, 31 York Street, Glasgow, G2 8NJ
- Phone: 0141 248 3761
Forvis Mazars
Forvis Mazars has a Glasgow audit and advisory practice backed by a wider UK Governance, Risk and Internal Control team. Its risk services cover internal audit, governance reviews, risk management, compliance reviews, IT audit, third-party assurance and internal controls work.
The firm also offers dedicated technology assurance, including risk-based IT internal audit, development of IT audit plans and integrated risk, assurance and compliance work. Its Glasgow team works with privately owned and international businesses, listed companies and public sector organisations, with local sector experience including healthcare, manufacturing, life sciences, construction and energy.
Key Facts
- Core services: Internal audit, enterprise risk management, governance, compliance reviews
- Technology assurance: IT internal audit, technology risk and controls assurance
- External assurance: Financial audit and independent assurance reviews
- Industries: Healthcare, public sector, manufacturing, life sciences, energy and infrastructure
Contact Information:
- Website: www.forvismazars.com
- Twitter: x.com/ForvisMazarsUK
- LinkedIn: www.linkedin.com/company/forvis-mazars-in-the-uk
- Instagram: www.instagram.com/forvismazarsuk
- Address: 100 Queen Street, Glasgow, G1 3DN
- Phone: +44 141 227 2400
Wbg
Wbg, formerly Wylie & Bisset, is a Glasgow-based accountancy firm providing internal and external audit alongside business advisory and other financial services. The current Wbg brand was introduced in 2024, so the former Wylie & Bisset name is no longer the firm’s primary trading identity.
Its internal audit team works across education, social housing, charities, public sector organisations and private businesses. Engagements can cover internal controls, governance and risk management as well as IT audit, investigations and specialist reviews. External audit is provided separately for organisations requiring independent financial assurance.
Key Facts
- Core services: Internal audit, external audit, governance reviews, risk management
- Additional assurance: IT audit, investigations and forensic accounting
- Sector experience: Education, social housing, charities, public and private sectors
- Specialization: Independent Scottish audit and assurance practice
Contact Information:
- Website: wbg.co.uk
- E-mail: [email protected]
- Address: 168 Bath Street, Glasgow, G2 4TP
- Phone: 0141 566 7000
Deloitte
Deloitte’s Glasgow office provides Audit & Assurance services and works with businesses across manufacturing, energy, digital markets and the public sector. Its wider Controls Assurance practice covers internal audit, financial reporting controls, internal control development, testing and remediation.
Internal audit can be delivered through advisory, co-sourcing, outsourcing and specialist resource models. Deloitte also supports independent controls and compliance reporting, third-party assurance, SOX controls programmes and control modernisation connected with finance transformation initiatives.
Key Facts
- Core services: Internal audit, controls assurance, audit and financial reporting assurance
- Controls work: Development, testing and remediation of internal controls
- Additional services: Third-party assurance, SOX controls, audit readiness
- Sectors: Manufacturing, oil and gas, power, public sector and digital businesses
Contact Information:
- Website: www.deloitte.com
- Facebook: www.facebook.com/deloitteuk
- Twitter: x.com/deloitteuk
- LinkedIn: www.linkedin.com/company/deloitte
- Address: 110 Queen Street, Glasgow, G1 3BX
- Phone: +44 (0)141 204 2800
KPMG
KPMG combines financial audit with broader assurance over controls, regulatory reporting, ESG information, business performance measures and contractual compliance. Its Controls Assurance practice reviews control environments and can provide independent assurance over processes and systems used by organisations and service providers.
The Glasgow office brings together audit, finance, technology, tax and advisory specialists. Local teams work with organisations in financial services, energy, public sector and education, while the national assurance practice can provide specialist input where an engagement involves controls, reporting or regulatory requirements outside the financial statements.
Key Facts
- Core services: Audit, controls assurance, regulatory assurance, KPI assurance
- Additional assurance: ESG reporting, grant compliance and transaction assurance
- Controls focus: Design and operating effectiveness of internal controls
- Sectors: Financial services, energy, public sector and education
Contact Information:
- Website: kpmg.com
- Twitter: x.com/kpmguk
- LinkedIn: www.linkedin.com/company/kpmg-uk
- Facebook: www.facebook.com/KPMG
- Address: 319 St Vincent Street, Glasgow, G2 5AS
- Phone: +44 (0)141 226 5511
Armstrong Watson
Armstrong Watson provides statutory audit, internal audit and independent assurance services to organisations across Scotland and the North of England. Its internal audit work can be delivered as either a co-sourced programme or a fully outsourced function and examines governance, internal controls and operational processes.
The wider assurance practice also handles independent reviews and grant audits. During statutory audit engagements, teams assess financial reporting while identifying areas where controls or risk management processes may require attention. Armstrong Watson maintains a Glasgow office on Seaward Street serving businesses, charities and other organisations.
Key Facts
- Core services: Internal audit, statutory audit, independent assurance reviews
- Risk work: Governance, operational processes and internal controls
- Additional assurance: Grant audits and certification
- Delivery options: Co-sourced and fully outsourced internal audit
Contact Information:
- Website: www.armstrongwatson.co.uk
- E-mail: [email protected]
- Facebook: www.facebook.com/armstrongwatson
- Twitter: x.com/armstrongwatson
- LinkedIn: www.linkedin.com/company/armstrong-watson
- Instagram: www.instagram.com/armstrongwatsonllp
- Address: Caledonia House, 89 Seaward Street, Glasgow, G41 1HJ
- Phone: 0141 272 0000
EY
EY’s Glasgow office provides Assurance and Consulting services to clients ranging from private businesses to listed companies and multinational groups. Its wider Assurance practice incorporates financial audit, technology risk, forensic and integrity services, sustainability assurance and financial accounting advisory work.
Technology Risk services include IT audit, assessment of IT controls, SOC reporting and reviews of systems and processes. EY also has an Internal Audit Transformation practice that supports internal audit diagnostics, co-sourced arrangements, managed services and analytics-based controls testing, giving organisations several ways to address financial, operational and technology assurance requirements.
Key Facts
- Core services: Audit, internal audit, technology risk and controls assurance
- Technology services: IT audit, SOC reporting, system and process assessments
- Additional assurance: Sustainability, forensic and financial accounting assurance
- Client range: Private businesses, listed companies and multinational groups
Contact Information:
- Website: www.ey.com
- Twitter: x.com/EYnews
- Facebook: www.facebook.com/EY
- LinkedIn: www.linkedin.com/company/ernstandyoung
- Address: G1 Building, 5 George Square, Glasgow, G2 1DY
- Phone: +44 141 226 9000
Henderson Loggie
Henderson Loggie provides internal audit and risk assurance services alongside statutory audit and independent assurance work. Its internal audit practice reviews governance, risk management and control environments and can operate through fully outsourced, co-sourced or individual consultancy engagements.
The firm’s assurance capabilities also cover enterprise risk management, internal controls and compliance, third-party assurance and SOC reporting, digital and information governance, fraud prevention and operational improvement. Henderson Loggie has a Glasgow office on St Vincent Street and works with private, public and third-sector organisations.
Key Facts
- Core services: Internal audit, enterprise risk management, controls and compliance assurance
- Additional assurance: SOC reporting, third-party assurance, fraud reviews and investigations
- Technology risk: Digital governance, cyber security, data protection and AI governance assurance
- Delivery models: Outsourced, co-sourced and targeted internal audit engagements
Contact Information:
- Website: hlca.co.uk
- E-mail: [email protected]
- Facebook: www.facebook.com/HendersonLoggie
- LinkedIn: www.linkedin.com/company/hendersonloggie
- Instagram: www.instagram.com/hendersonloggie
- Address: Suite 5.3, Kirkstane House, 139 St Vincent Street, Glasgow, G2 5JF
- Phone: 0141 471 9870
TC Alexander Sloan
TC Alexander Sloan is a Glasgow accountancy and advisory firm formed after Alexander Sloan joined TC Group in 2025. The practice continues to provide external audit and assurance services from its St Vincent Street office, supported by partners and audit professionals working with businesses, charities, credit unions and other organisations.
Internal audit is also part of the firm’s assurance work. Its specialist experience includes reviewing controls and compliance within credit unions, while related services cover risk management, regulatory compliance and due diligence. This gives the Glasgow practice both conventional financial audit capabilities and more focused internal assurance expertise for regulated organisations.
Key Facts
- Core services: External audit, internal audit, accounts and compliance
- Risk services: Risk management, compliance reviews and internal controls
- Specialist assurance: Credit union audit and internal audit
- Additional services: Due diligence, business advisory and financial reporting support
Contact Information:
- Website: www.tc-group.com
- E-mail: [email protected]
- LinkedIn: www.linkedin.com/company/tc-group3
- Instagram: www.instagram.com/tcgroupuk
- Address: 180 St Vincent Street, Glasgow, G2 5SG
- Phone: 0141 204 8989
Conclusion
Risk and assurance firms serving Glasgow differ considerably in the scope of work they provide. Some practices combine external audit with internal controls and governance advice, while others have dedicated teams covering enterprise risk management, internal audit outsourcing, technology assurance, regulatory compliance, fraud risk and third-party controls.
The appropriate provider depends on the organisation’s risk profile and the type of assurance required. A regulated or listed organisation may need specialist controls and regulatory experience, while a growing private company may be focused on establishing an internal audit function, strengthening governance or preparing its control environment for greater scrutiny.
There is no single firm that suits every engagement. Comparing sector experience, independence requirements, technical capabilities, delivery model and the level of senior involvement can help organisations select a risk and assurance provider that fits their governance and reporting needs.