An internal audit has found the HSE has “unsatisfactory” oversight of the appointment of doctors to consultant roles, exposing patients and the health service to risk.