In light of the scientific and technical progress in all aspects of life, banks need a control and auditing system to protect them from the risks they are exposed to as a result of their diverse financial dealings, to reduce or avoid losses and maintain and support banks to carry out their work in a way that enables them to achieve a competitive advantage. The problem is embodied in the extent of the contribution of internal auditing in how to manage banking risks and demonstrate their effectiveness in banks. It aims to stand on the reality of internal auditing and the extent of its application in Iraqi banks, with the importance of identifying the functions of internal auditing in auditing, evaluating and following up on the efficiency and effectiveness of risk management procedures based on the risk-based auditing approach. In addition to the commitment to applying the standards, principles and guidelines issued by the Institute of Internal Auditors or issued by the International Organization for Banking Supervision that govern the performance of the internal auditor and help him identify obstacles and find solutions to support and succeed in risk management in the two banks. The research sample used the questionnaire in the practical aspect to show the effectiveness of internal auditing in managing banking risks and to come up with a number of recommendations, the most important of which are: Continuing work to enhance and develop the skills and knowledge of internal auditors by holding training courses on how to deal with banking risk management to enable them to perform their work effectively, and for banking institutions to support the components of the independence of the internal auditor to perform his work efficiently.