"Internal Audit" is pretty common. Though I wouldn't just assume they would take your side. Whistleblowing is tricky business. Someone may decide that the public tarnish of "it happened" is worse than letting it slide.