Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Internal Audit is an independent, objective assurance function critical to meeting business ambitions and protecting customer interests by ensuring risk, governance, and internal control frameworks are fit for purpose. This role provides independent assurance over technology security, cyber security, and infrastructure controls, performing and supporting audits across various critical technology platforms.

Responsibilities

Supporting the planning and scoping of technology security audits.
Identifying key cyber security, infrastructure and technology risks relevant to audit objectives.
Reviewing documentation, architectures, standards, procedures and control frameworks.
Developing audit testing approaches for complex technical environments.
Leveraging data analytics, automation and AI-enabled tools where appropriate to enhance audit activities.
Independently performing audit testing across technology security, cyber security and infrastructure domains.
Leading walkthrough meetings with Technology and Information Security stakeholders to understand processes, controls and technologies.
Assessing the design and operating effectiveness of security controls across networks, databases, operating systems, cloud platforms and infrastructure services.
Reviewing controls relating to identity and access management, privileged access, vulnerability management, security monitoring, incident management and infrastructure hardening.
Evaluating technical evidence to determine whether controls are appropriately designed and operating effectively.
Producing high-quality workpapers and audit evidence in accordance with Internal Audit standards.
Delivering assigned work to agreed quality standards and timelines with minimal supervision.
Translating complex technical findings into clear business-focused risk and control observations.
Drafting high-quality audit observations that clearly articulate risks, impacts, root causes and recommendations.
Communicating findings professionally and constructively with stakeholders.
Presenting technical issues in a clear and simple manner that can be understood by business management.
Supporting audit managers in the preparation of audit reports and stakeholder communications.
Building effective relationships with Information Security, Technology Infrastructure, Engineering and Cyber Security stakeholders.
Establishing credibility through technical expertise, professionalism and constructive challenge.
Maintaining an understanding of key technology initiatives, security programmes and emerging risks.
Providing objective and balanced challenge whilst maintaining positive working relationships.
Contributing positively to a collaborative and inclusive team environment.
Supporting junior auditors through coaching, knowledge sharing and informal mentoring.
Sharing technical expertise and industry good practice across the Internal Audit function.
Working effectively with colleagues across multiple audit assignments and initiatives.
Supporting the continuous improvement of technology audit methodologies and practices.
Sharing knowledge relating to cyber security, technology security and infrastructure risk management.
Promoting the effective use of data analytics, automation and AI-enabled tools such as Microsoft Copilot.
Contributing to audit innovation and continuous improvement initiatives.

Requirements

Strong knowledge of Digital security and Technology resilience risks, controls and industry good practice.
Strong technical understanding of networks, operating systems, databases, cloud platforms, identity and access management, infrastructure security and security monitoring capabilities.
A strong understanding of the workings of both a Financial Services Group and an Internal Audit function.
The ability to independently lead walkthrough meetings and control discussions with technical stakeholders.
Strong analytical skills and attention to detail when evaluating control design and operating effectiveness.
The ability to identify root causes, security vulnerabilities, control weaknesses and associated business risks.
Excellent written and verbal communication skills, with the ability to explain complex technical concepts to both technical and non-technical audiences.
Strong stakeholder management and influencing skills.
A collaborative working style and commitment to supporting team success.
An ability and willingness to leverage technology, data analytics and AI-enabled tools such as Microsoft Copilot to enhance audit effectiveness and efficiency.
Highly motivated, proactive and capable of working independently.
Possess strong technical curiosity and a desire to remain current with evolving cyber threats and technology security developments.
Demonstrate strong analytical and problem-solving capabilities.
Excellent attention to detail and a disciplined approach to audit execution.
A strong team player who contributes positively to team objectives and supports colleagues.
Communicate technical matters clearly, concisely and confidently.
Able to translate technical risks and control weaknesses into business-focused language.
Build trusted relationships with stakeholders across Technology and Information Security functions.
Challenge constructively whilst remaining open to alternative viewpoints.
Demonstrate integrity, professionalism and sound judgement in all interactions.
Significant experience performing Technology Security Audits and Cyber Security Audits within Financial Services or similarly regulated environments.
Good understanding of industry standards and frameworks such as ISO 27001, NIST Cybersecurity Framework, CIS Controls and COBIT.
Proven ability to communicate highly technical matters in a simple, risk-focused manner.
Demonstrated ability to work independently whilst also contributing positively within a team environment.
Experience using data analytics and AI-enabled tools such as Microsoft Copilot to improve audit effectiveness and efficiency.

Skills

Network Security
Network Architecture
Firewalls and Perimeter Security
Windows Operating Systems
Linux Operating Systems
Unix Operating Systems
Database Security
Active Directory
Identity & Access Management
Cloud Security (Azure)
Vulnerability Management
Security Monitoring
SIEM Technologies
Endpoint Security
Infrastructure Security Controls
Data Analytics
AI-enabled tools
Microsoft Copilot
ISO 27001
NIST Cybersecurity Framework
CIS Controls
COBIT
CISA
CISSP
CISM
CRISC
CCSP

Location

Work Type

Flexible working arrangements

Experience Level

Principal
Experienced technology security professional
Significant experience

Education Level

Professional certifications such as CISA, CISSP, CISM, CRISC, CCSP or equivalent would be highly advantageous.

Benefits

Valuable pension scheme of up to 18% (13% employer contributions, 5% employee contributions).
Access to Share Save and Share Incentive Plan.
Financial wellbeing and support services.
38 days annual leave (including bank holidays).
Opportunity to purchase up to five extra days of leave.
Time Off When You Need It policy.
Market-leading Inspiring Families policy including comprehensive support and paid parental leave (maternity, adoption, surrogacy, paternity).
Private Healthcare.
Critical Illness cover.
Life Assurance.
Additional family options for Health & Protection cover.

About the Company

M&G has a heritage dating back more than 175 years with a long history of innovation in savings and investments, combining asset management and insurance expertise.
The company offers a wide range of solutions through its Asset Management and Life operating segments.
M&G aims to create an exceptional place to work for exceptional talent by embodying values of telling it like it is, owning it now, and moving it forward together with care and integrity.

Equal Opportunity

M&G strives to have a diverse workforce and an inclusive culture, underpinned by policies and employee-led networks offering networking, support, and development opportunities.
Applications are welcomed from people of all backgrounds – across gender, ethnicity, age, disability, sexual orientation and more – including neurodivergent individuals, career returners and those with military service experience.
M&G is proud to be Level 3: Disability Confident Leader under the UK Government Disability Confident employer scheme.
Applications from candidates with disabilities and long-term health conditions are welcomed.
Commitment to providing an inclusive recruitment process.
Candidates have the opportunity to request reasonable adjustments when applying.
Contact careers@mandg.com for additional support at any stage.