Principal Auditor of Technology and Security, M&G
Salary not provided
Offers Share Save and Share Incentive Plan,
Linux
Azure
Windows
Active Directory
Unix
Senior and Expert level
Edinburgh
London
International savings and investments company
Be an early applicant
International savings and investments company
1001+ employees
B2CB2BEnterpriseInvestingFinancial Services
Be an early applicant
Salary not provided
Offers Share Save and Share Incentive Plan,
Linux
Azure
Windows
Active Directory
Unix
Senior and Expert level
Edinburgh
London
1001+ employees
B2CB2BEnterpriseInvestingFinancial Services
Company mission
To help people manage and grow their savings and investments, responsibly.
Role
Who you are
- Strong knowledge of Digital security and Technology resilience risks, controls and industry good practice
- Strong technical understanding of networks, operating systems, databases, cloud platforms, identity and access management, infrastructure security and security monitoring capabilities
- A strong understanding of the workings of both a Financial Services Group and an Internal Audit function
- The ability to independently lead walkthrough meetings and control discussions with technical stakeholders
- Strong analytical skills and attention to detail when evaluating control design and operating effectiveness
- The ability to identify root causes, security vulnerabilities, control weaknesses and associated business risks
- Excellent written and verbal communication skills, with the ability to explain complex technical concepts to both technical and non-technical audiences
- Strong stakeholder management and influencing skills
- A collaborative working style and commitment to supporting team success; and
- An ability and willingness to leverage technology, data analytics and AI-enabled tools such as Microsoft Copilot to enhance audit effectiveness and efficiency
- Be highly motivated, proactive and capable of working independently
- Possess strong technical curiosity and a desire to remain current with evolving cyber threats and technology security developments
- Demonstrate strong analytical and problem-solving capabilities
- Have excellent attention to detail and a disciplined approach to audit execution
- Be a strong team player who contributes positively to team objectives and supports colleagues
- Communicate technical matters clearly, concisely and confidently
- Be able to translate technical risks and control weaknesses into business-focused language
- Build trusted relationships with stakeholders across Technology and Information Security functions
- Challenge constructively whilst remaining open to alternative viewpoints; and
- Demonstrate integrity, professionalism and sound judgement in all interactions
- Significant experience performing Technology Security Audits and Cyber Security Audits within Financial Services or similarly regulated environments
- Strong technical knowledge of:
- Network Security and Network Architecture
- Firewalls and Perimeter Security
- Windows, Linux and Unix Operating Systems
- Database Security
- Active Directory and Identity & Access Management
- Cloud Security (Azure)
- Vulnerability Management
- Security Monitoring and SIEM Technologies
- Endpoint Security
- Infrastructure Security Controls
- Experience assessing control design and operating effectiveness across technology and security processes
- Good understanding of industry standards and frameworks such as ISO 27001, NIST Cybersecurity Framework, CIS Controls and COBIT
- Strong report writing, communication and stakeholder management skills
- Proven ability to communicate highly technical matters in a simple, risk-focused manner
- Demonstrated ability to work independently whilst also contributing positively within a team environment
- Experience using data analytics and AI-enabled tools such as Microsoft Copilot to improve audit effectiveness and efficiency
- Professional certifications such as CISA, CISSP, CISM, CRISC, CCSP or equivalent would be highly advantageous
What the job involves
- Internal Audit is an independent, objective assurance function that is critical to meeting our business ambitions whilst also protecting the interests of our customers by ensuring that the internal control, risk and governance frameworks are always fit for purpose
- We look beyond financial risks and statements to consider wider issues such as the organisation's reputation, growth, its impact on the environment and the way we treat our customers and employees
- As a Principal Information Technology Auditor, you will be responsible for providing independent assurance over the effectiveness of technology security, cyber security and infrastructure controls across the organisation
- Working closely with Technology, Information Security and business stakeholders, you will perform and support audits covering areas such as network security, cloud security, identity and access management, infrastructure security, vulnerability management, security operations, databases, operating systems and other critical technology platforms
- This is a key role within the Internal Audit function for an experienced technology security professional with strong technical audit expertise
- The successful candidate will be capable of independently planning and executing audit fieldwork, leading walkthrough discussions with stakeholders, assessing controls and identifying risks and control weaknesses with minimal supervision
- Supporting the planning and scoping of technology security audits
- Identifying key cyber security, infrastructure and technology risks relevant to audit objectives
- Reviewing documentation, architectures, standards, procedures and control frameworks
- Developing audit testing approaches for complex technical environments
- Leveraging data analytics, automation and AI-enabled tools where appropriate to enhance audit activities
- Independently performing audit testing across technology security, cyber security and infrastructure domains
- Leading walkthrough meetings with Technology and Information Security stakeholders to understand processes, controls and technologies
- Assessing the design and operating effectiveness of security controls across networks, databases, operating systems, cloud platforms and infrastructure services
- Reviewing controls relating to identity and access management, privileged access, vulnerability management, security monitoring, incident management and infrastructure hardening
- Evaluating technical evidence to determine whether controls are appropriately designed and operating effectively
- Producing high-quality workpapers and audit evidence in accordance with Internal Audit standards
- Delivering assigned work to agreed quality standards and timelines with minimal supervision
- Translating complex technical findings into clear business-focused risk and control observations
- Drafting high-quality audit observations that clearly articulate risks, impacts, root causes and recommendations
- Communicating findings professionally and constructively with stakeholders
- Presenting technical issues in a clear and simple manner that can be understood by business management
- Supporting audit managers in the preparation of audit reports and stakeholder communications
- Building effective relationships with Information Security, Technology Infrastructure, Engineering and Cyber Security stakeholders
- Establishing credibility through technical expertise, professionalism and constructive challenge
- Maintaining an understanding of key technology initiatives, security programmes and emerging risks
- Providing objective and balanced challenge whilst maintaining positive working relationships
- Contributing positively to a collaborative and inclusive team environment
- Supporting junior auditors through coaching, knowledge sharing and informal mentoring
- Sharing technical expertise and industry good practice across the Internal Audit function
- Working effectively with colleagues across multiple audit assignments and initiatives
- Supporting the continuous improvement of technology audit methodologies and practices
- Sharing knowledge relating to cyber security, technology security and infrastructure risk management
- Promoting the effective use of data analytics, automation and AI-enabled tools such as Microsoft Copilot
- Contributing to audit innovation and continuous improvement initiatives
Application process
- End Date: August 13, 2026
Our take
Established through a merger with Prudential's UK and Europe operation in 2017, M&G has emerged as a leading savings and investment company. Combining five prominent brands under one umbrella - M&G Real Estate, M&G Investments, Pru, M&G Wealth, and Infracaptial - the company boasts a robust global financial services operation.
M&G's commitment to enhancing its platform's offerings is evident through substantial investments in service and support infrastructure. Innovations such as deep back-office integration, cloud-based customer relationship management tools, and e-signature software underscore the company's dedication to providing top-notch solutions.
Catering to a diverse clientele ranging from individuals to major enterprises, M&G continues to expand its international presence. It reported an impressive £1.8 billion in flows from open business in 2025, and continues to diversify and leverage advancements in AI and Big Data. This approach should help the company maintain its position as a key player in the ever-evolving landscape of savings and investment.
Steph
Company Specialist at Welcome to the Jungle
Insights
3% employee growth in 12 months
Company
Company benefits
- 8% non-contributory pension plus up to 5% matching
- Life Assurance & Death in Service
- Support, feedback and development programmes to help you reach your full potential
- Flexible culture and ways of working
- Focus on health & wellbeing
- 30 days holiday as standard (excluding bank holidays), with the ability to purchase an additional 5 days
- Time off when you need it includes carer's leave, faith leave, grandparent leave and career breaks
- New parents receive up to 26 weeks of full pay while on leave
- 4-week back-to-work transition for new parents: work 80% of your contractual hours, be paid for 100%
- New parents can take family leave in flexible blocks within the first year of birth/adaoption
Company HQ
City of London, London, UK
Leadership
Andrea Rossi
(Group CEO)Co-Founder & Director at REsustain. Former CEO of AXA, and was an FC Girondins de Bordeaux Board Member.
Share this job
View 5 more jobs at M&G