I definitely would not call that a common practice. The internal auditor at our bank reports directly to the Audit Committee. The Chair of the Audit Committee is a Board member. There is no one in management who oversees the auditors except in an administrative way. i.e. report vacation or sick time and approve expenses.
Sounds like major issues indeed.
_________________________
Don't believe everything you think