Risk and assurance services can cover internal audit, enterprise risk management, governance, controls testing, technology risk, regulatory compliance and specialist assurance reviews. This guide highlights firms with a Manchester office or clear service coverage for Manchester organisations, rather than ranking them. The selection focuses on providers whose current service information demonstrates capabilities beyond statutory financial audit alone.
Acumon
Acumon is a UK firm of chartered accountants and registered auditors providing risk and assurance services alongside external audit, accounting, tax and advisory work. Its Risk & Tech Assurance practice covers internal audit, risk management, corporate governance, IT risk, cybersecurity assurance, anti-fraud reviews and other independent assurance assignments for organisations seeking greater oversight of their controls, governance and operational risks.
The firm works with organisations ranging from growing owner-managed businesses and charities through to larger corporate groups and regulated entities. Audit engagements are delivered in accordance with International Standards on Auditing (UK) and supported by a structured risk-based audit methodology.
Acumon holds a Public Interest Entity (PIE) audit licence, allowing the firm to audit listed companies and other entities subject to enhanced regulatory oversight in the United Kingdom. PIE audits are subject to additional regulatory supervision and quality requirements, and only a limited number of firms are authorised to undertake this type of work.
In addition to its UK audit registration, Acumon also holds audit licences in several international financial centres, including the Cayman Islands, British Virgin Islands (BVI), Jersey, and Isle of Man. These licences enable the firm to support international corporate groups where entities are located across multiple jurisdictions.
International group structures frequently involve a combination of UK operating companies and offshore holding entities, particularly in sectors such as investment management, technology, energy, and international trade. Coordinating audit and assurance work across these structures requires familiarity with cross-border financial reporting, group consolidation processes, governance arrangements and internal control environments.
Acumon works with finance teams, management and boards on risk and assurance requirements while also supporting organisations with statutory audit, financial reporting, governance and internal controls. Risk engagements can be delivered as fully outsourced functions, co-sourced support alongside an existing team, or focused individual reviews depending on the organisation’s requirements.
Risk and Assurance Capabilities
Acumon provides risk and assurance services for organisations across a wide range of structures and sectors.
These include:
- UK limited companies and corporate groups
- Public Interest Entities (PIEs) and regulated organisations
- UK subsidiaries of international groups
- charities and not-for-profit organisations
- owner-managed businesses approaching statutory audit thresholds
- offshore holding companies and investment vehicles
Risk and assurance engagements are typically led by senior risk and assurance professionals with direct involvement throughout the engagement.
Regulatory Licences and Registrations
Acumon holds several audit registrations that enable it to support organisations operating across multiple jurisdictions.
These include:
- UK statutory audit registration
- Public Interest Entity (PIE) audit licence
- Jersey audit licence
- Isle of Man audit licence
- Cayman Islands audit licence
- British Virgin Islands audit licence
These registrations allow the firm to provide audit services to groups that include entities in both the UK and key international financial centres.
Core Services
Acumon provides a range of services that support financial reporting and governance.
These include:
- statutory external audit
- group and subsidiary audits
- Public Interest Entity (PIE) audits
- charity and not-for-profit audit
- audit of international group structures
- internal audit and governance reviews
- risk management and compliance support
Audit work is often delivered alongside discussions with management and boards regarding financial reporting processes and governance frameworks.
Many organisations initially encounter statutory audit requirements as they grow and exceed the audit exemption thresholds set out in the Companies Act.
Acumon works with businesses that are:
- approaching their first statutory audit
- preparing for external investment
- expanding into international markets
- operating within corporate group structures
Early engagement with an audit firm can help ensure that financial reporting systems and documentation are aligned with statutory audit requirements.
Contact Information
- Website: acumon.com
- Phone: 020 8567 3451
- E-mail: [email protected]
- Address: 1-2 Craven Road, Ealing, London, W5 2UA, UK
BDO
BDO’s Risk Advisory Services practice works across internal control, risk and governance. Its offering includes internal audit, enterprise risk management, corporate governance, controls assurance, SOX compliance, third-party assurance and technology risk. Internal audit can be delivered through outsourced or co-sourced arrangements, with additional work covering audit committee effectiveness and quality assessments.
The firm’s Manchester office provides both Audit and Assurance and Digital Risk Advisory Services. Daniel Bower, BDO’s National Internal Audit Lead, works from its Manchester and Leeds offices and advises on internal audit, governance, risk management, cyber security and third-party assurance.
Key Facts
- Ideal for: Mid-market, listed, public sector and not-for-profit organisations with broad risk requirements
- Core services: Internal audit, enterprise risk management, controls assurance, corporate governance, technology risk, third-party assurance
- Delivery models: Outsourcing, co-sourcing and specialist advisory assignments
- Industries: Manufacturing, retail, technology, engineering, construction, life sciences, public sector and third sector
- Location: Manchester office with Risk Advisory capability
Contact Information
- Website: www.bdo.co.uk
- LinkedIn: www.linkedin.com/company/bdo-llp
- Instagram: www.instagram.com/lifeatbdo
- Address: Eden Building, Irwell Street, Salford, Manchester, M3 5EN, United Kingdom
- Phone: 0161 817 7500
RSM UK
RSM UK combines internal audit and controls work with wider risk and governance consulting. Its current services include risk-based audit planning, control design and effectiveness testing, corporate governance, enterprise risk management, technology risk assurance, sustainability assurance and technology and data risk.
There is direct Manchester capability within this practice. Risk and Governance Partner Andrew Gibson is based in the city and works on internal audit, internal controls and risk management. That makes RSM relevant for organisations that need a local team but may also require specialists from other areas of a national consulting practice.
Key Facts
- Ideal for: Organisations strengthening internal audit, controls and enterprise risk frameworks
- Core services: Internal audit, controls testing, ERM, corporate governance, technology risk and non-financial assurance
- Specialization: Connecting risk, governance, controls and technology assurance
- Notable local capability: Manchester-based Risk and Governance partner
Contact Information:
- Website: www.rsmuk.com
- LinkedIn: www.linkedin.com/company/rsm-uk
- Instagram: www.instagram.com/rsm.uk
- Address: Landmark, St Peter’s Square, 1 Oxford Street, Manchester, M1 4PB
- Phone: +44 (0)161 830 4000
Menzies LLP
Menzies has an established internal audit and risk assurance presence in Manchester following its 2025 merger with Beever & Struthers. The current team includes Certified Internal Auditors working on assurance engagements for charities, housing providers, educational institutions and other not-for-profit organisations.
Its Manchester specialists work within the firm’s Risk, Assurance and Advisory function. Services represented locally include internal audit, risk assurance, data analytics and external quality assessments under the Institute of Internal Auditors framework, with particularly visible experience in social housing.
Key Facts
- Ideal for: Social housing, charity, education and other not-for-profit organisations
- Core services: Internal audit, risk assurance, external quality assessments and data analytics
- Specialization: Risk and assurance work for social purpose organisations
- Current identity: Manchester specialists joined Menzies through the 2025 Beever & Struthers merger
Contact Information:
- Website: www.menzies.co.uk
- LinkedIn: www.linkedin.com/company/menzies-llp
- Instagram: www.instagram.com/menzies_llp
- Address: One Express, 1 George Leigh Street, Manchester, M4 5DL
- Phone: 0333 091 0411
Deloitte
Deloitte supports internal audit functions through fully outsourced and co-sourced models as well as advisory, effectiveness review and transformation work. Its services can extend into IT internal audit, internal controls certification, specialised assurance and reviews of technology environments, applications, infrastructure and enterprise systems.
Controls Assurance adds another dimension, covering internal control development, testing and remediation, compliance reporting, third-party assurance and SOX controls work. Technology specialists can assess IT general controls, ERP environments, access, data migration and other technology-dependent controls.
Key Facts
- Ideal for: Larger or complex organisations with internal audit, controls and technology assurance requirements
- Core services: Internal audit, controls assurance, IT assurance, SOX support and third-party assurance
- Delivery models: Outsourcing, co-sourcing, staff augmentation and advisory
- Specialization: Combining operational, financial and technology-related controls assurance
Contact Information:
- Website: www.deloitte.com
- Facebook: www.facebook.com/deloitteuk
- Twitter: x.com/deloitteuk
- LinkedIn: www.linkedin.com/company/deloitte
- Address: 100 Embankment, Cathedral Approach, Manchester, M3 7FB, United Kingdom
- Phone: +44 (0)161 832 3555
Saffery
Saffery offers dedicated Risk Assurance services alongside external audit and internal controls reviews. Its risk work can include identifying and assessing business risks, developing mitigation actions, setting up monitoring processes and preparing risk registers and management reporting. The service is available to commercial and not-for-profit organisations.
The firm also reviews internal control environments, including controls over financial reporting, compliance and wider business risks. This gives organisations the option of commissioning a defined controls or risk review without necessarily outsourcing an entire internal audit function.
Key Facts
- Ideal for: Organisations seeking targeted risk management and internal control reviews
- Core services: Risk assurance, risk registers, risk reporting and internal controls reviews
- Specialization: Independent reviews of risk management processes and control environments
- Client types: Commercial and not-for-profit organisations
Contact Information:
- Website: www.saffery.com
- E-mail: [email protected]
- LinkedIn: www.linkedin.com/company/saffery
- Instagram: www.instagram.com/saffery_uk
- Address: Trinity Court, 16 John Dalton Street, Manchester, M2 6HY
- Phone: +44 (0) 330 094 3384
Grant Thornton
Grant Thornton’s Business Risk Services practice covers a broad assurance agenda. Internal audit is available through co-sourced, outsourced and resource-support models, while the wider service portfolio extends to enterprise risk management, controls advisory, technology risk, data assurance, supplier and contract assurance, project assurance and service organisation controls reporting.
Technology risk assignments can address cyber security, data privacy, cloud environments, resilience, ERP implementations, third parties, SOX testing and IT control frameworks. The breadth of the practice is useful where an internal audit plan requires both conventional process reviews and specialist technical assurance.
Key Facts
- Ideal for: Organisations needing multidisciplinary internal audit and business risk support
- Core services: Internal audit, ERM, controls advisory, technology risk, data assurance and project assurance
- Delivery models: Outsourcing, co-sourcing and resource augmentation
- Specialization: Business risk services spanning operational, technology and regulatory areas
Contact Information:
- Website: www.grantthornton.co.uk
- LinkedIn: www.linkedin.com/company/grant-thornton-uk
- Instagram: www.instagram.com/gt_trainees
- Address: Landmark St Peter’s Square, 1 Oxford Street, Manchester, M1 4PB
- Phone: +44 (0)161 953 6900
MHA
MHA has a dedicated Governance, Risk & Controls practice that works across both assurance and advisory engagements. Its published capabilities cover internal audit, governance, regulatory compliance, finance and risk management, financial systems reviews, technology and cyber risk, and operational reviews.
The practice works with public and private sector clients, with particular experience in financial services, charities and not-for-profit organisations. This makes its scope broader than purely financial assurance, particularly where boards need independent review of governance structures, operational controls or technology-related risks.
Key Facts
- Ideal for: Financial services, charities, not-for-profit bodies and organisations with governance or compliance requirements
- Core services: Internal audit, governance, regulatory compliance, technology and cyber risk, operational reviews
- Specialization: Governance, Risk & Controls assurance and advisory
- Sectors: Public and private sectors, including financial services and not-for-profit
Contact Information:
- Website: www.mha.co.uk
- E-mail: [email protected]
- Facebook: www.facebook.com/people/MHA-Accountants/100063452388108
- LinkedIn: www.linkedin.com/company/mha-uk
- Instagram: www.instagram.com/mhaaccountants
- Address: 80 Mosley Street, Manchester, M2 3FX
- Phone: 0161 519 5050
Forvis Mazars
Forvis Mazars provides risk consulting across enterprise risk management, governance, internal audit, internal controls, technology assurance, regulatory compliance and third-party risk. Its internal audit work can support businesses establishing a new function or strengthening an existing one, with access to subject matter expertise across different industries.
The firm’s wider Governance, Risk & Internal Control capability also covers IT audit, compliance reviews, governance reviews, SOX and reviews of outsourced service providers. Manchester has a direct connection to this work, with risk and assurance leadership represented in the office.
Key Facts
- Ideal for: Organisations requiring integrated governance, internal audit and risk consulting
- Core services: ERM, internal audit, governance, internal controls, tech assurance and regulatory compliance
- Specialization: Joined-up risk, governance and internal control assurance
- Additional capabilities: Third-party assurance and board effectiveness reviews
Contact Information:
- Website: www.forvismazars.com
- Twitter: x.com/ForvisMazarsUK
- LinkedIn: www.linkedin.com/company/forvis-mazars-in-the-uk
- Instagram: www.instagram.com/forvismazarsuk
- Address: One St Peters Square, Manchester, M2 3DE, United Kingdom
- Phone: +44(0)-161-238-9200
KPMG
KPMG’s internal audit practice addresses governance, risk and compliance through risk assessments, compliance reviews, audit execution and continuous assurance. The wider service offering includes internal audit outsourcing and co-sourcing, enterprise risk management, contract compliance and assurance, major project risk and regulatory assurance.
For companies facing more complex control environments, KPMG can connect internal audit with other governance, risk and compliance capabilities. Its Manchester team also works across audit, advisory, cyber security and digital transformation, giving organisations local access to several disciplines that may contribute to an assurance programme.
Key Facts
- Ideal for: Complex organisations requiring governance, compliance and internal audit support
- Core services: Internal audit, ERM, compliance reviews, contract assurance and project risk assurance
- Specialization: Governance, Risk & Compliance
- Additional capability: Cyber and digital risk expertise available through the wider firm
Contact Information:
- Website: kpmg.com
- Twitter: x.com/kpmguk
- LinkedIn: www.linkedin.com/company/kpmg-uk
- Address: One St Peter’s Square, Manchester, M2 3AE
- Phone: +44 (0)161 246 4000
S&W Group
S&W’s Risk Advisory practice focuses on risk management, governance and organisational controls. Its services include enterprise risk management, governance, risk and compliance, internal audit and operational resilience, with assurance designed to cover people, processes, technology and external service providers.
The firm also provides regulatory assurance and controls testing, including outsourced and co-sourced internal audit for financial services businesses. Its broader assurance practice covers standards-based assurance, non-statutory audit and corporate reporting, while Manchester clients can access assurance and accounting services from the firm’s Pall Mall office.
Key Facts
- Ideal for: Businesses combining enterprise risk, internal controls and regulatory assurance requirements
- Core services: ERM, GRC, internal audit, operational resilience and controls testing
- Specialization: Risk advisory and independent assurance
- Additional capability: Financial services regulatory assurance
Contact Information:
- Website: www.swgroup.com
- Twitter: x.com/S_W_Group
- LinkedIn: www.linkedin.com/company/swgroupuk
- Address: Pall Mall, 1 Pollen Square, 59 King Street, Manchester, M2 4PD
- Phone: +44 161 832 6413
EY
EY combines assurance services with a separate Risk Consulting practice. Its assurance portfolio includes audit, climate and sustainability assurance, financial accounting advisory, forensic work and Technology Risk. Technology Risk can cover IT controls, cybersecurity attestation, cloud assurance, regulatory compliance and other technology-dependent control environments.
Risk Consulting addresses enterprise-level risk and transformation, with Manchester-based leadership in the practice. Christopher Gallagher, an EY Risk Consulting Partner based in Manchester, works on risk transformation across industries and leads a team operating across the UK and Ireland.
Key Facts
- Ideal for: Organisations dealing with enterprise, technology and transformation risk
- Core services: Risk consulting, technology risk, controls assessment and assurance
- Specialization: Enterprise risk transformation and technology-dependent assurance
- Additional assurance areas: Forensics, sustainability and financial accounting advisory
Contact Information:
- Website: www.ey.com
- Twitter: x.com/EYnews
- Facebook: www.facebook.com/EY
- LinkedIn: www.linkedin.com/company/ernstandyoung
- Address: 2 St Peters Square, Manchester, M2 3DF
Crowe
Crowe provides internal audit and specialist assurance with a particularly clear focus on social purpose and not-for-profit organisations. Its internal audit service can be fully outsourced or co-sourced, while governance work covers board effectiveness, governance reviews and organisational decision-making.
Specialist assurance can extend into technology risk, cyber security, data analytics, project and programme change, fraud and misconduct, risk management, supply chain assurance and AAF reporting. Crowe also supports external quality assessments and SOX-related control design and testing.
Key Facts
- Ideal for: Charities, education, social housing and other social purpose organisations
- Core services: Internal audit, governance reviews, specialist assurance and external quality assessments
- Specialist areas: Technology risk, cyber, project assurance, fraud and supply chain assurance
- Delivery models: Fully outsourced and co-sourced internal audit
Contact Information:
- Website: www.crowe.com
- Twitter: x.com/CroweUK
- LinkedIn: www.linkedin.com/company/crowe-uk
- Instagram: www.instagram.com/crowe_uk
- Address: 3rd Floor, St George’s House, 56 Peter Street, Manchester, M2 3NQ
- Phone: +44 (0)161 214 7500
PwC
PwC’s internal audit services focus on assurance over business risks, processes, systems and data across private companies, public sector organisations and financial services. Its wider Risk and Regulation capabilities include governance, risk and compliance, integrated resilience, financial crime, commercial controls and other areas where organisations need independent challenge or risk advice.
The firm also handles non-financial assurance, including assurance relating to service organisation controls, technology systems, cyber security and supply chains. Its substantial Manchester operation includes specialists across business services, financial services, manufacturing, public sector, retail and technology-related industries.
Key Facts
- Ideal for: Larger organisations with complex internal audit, regulatory and non-financial assurance requirements
- Core services: Internal audit, governance and compliance, resilience, controls and technology-related assurance
- Specialization: Combining risk, regulation and independent assurance
- Industries: Financial services, manufacturing, public sector, retail, technology and business services
Contact Information:
- Website: www.pwc.co.uk
- Facebook: www.facebook.com/PwCUK
- LinkedIn: www.linkedin.com/company/pwc-uk
- Instagram: www.instagram.com/pwc_uk
- Address: Manchester Hardman Sq, 1 Hardman Square, Manchester, M3 3EB, United Kingdom
- Phone: +44 (0)161 236 9191
Conclusion
Risk and assurance providers in Manchester differ considerably in the scope of work they take on. Some have extensive multidisciplinary practices covering internal audit, controls, technology, regulation and enterprise risk, while others offer more focused support around governance, risk registers, specialist assurance or particular sectors.
The appropriate provider depends on the assurance already available inside the organisation and the risks that still require independent review. A business establishing its first internal audit function may need a different delivery model from a regulated organisation looking for technology risk specialists, while charities and social housing providers may place more weight on relevant sector knowledge. Budget, project scope, required specialist skills and the level of local involvement should all form part of the comparison.