If your organization is designed to have a C-level official to manage things like internal audit, and that job is vacant for an extended period, it’s unlikely that the VP of Audit has the political capital to be heard.

The shitshow around this bank is a case study for poor or no internal controls.