At M&G our vision is: to become the best loved and most successful savings and investment business and we're looking for people who are excited about joining us on our journey. We're digitally transforming and investing heavily in technology and innovation to develop new and improved customer propositions that really raise the bar for our customers. To help us achieve our vision we're looking for exceptional people who live our values and behaviours and who can inspire others; embrace change; deliver results and keep it simple.

What you can expect from us:
We are committed to creating an environment where you can be exceptional at all you do. To help us deliver this, we promise to:

• Challenge Your Limits by creating a stimulating working environment and providing opportunities for you to be involved in meaningful and challenging work
• Support Your Aspirations with a commitment to learning and development that helps you achieve and build your experience with people who want you to succeed
• Value Your Input whereby leaders and managers will involve you in key decisions, listen to your thoughts and recognise the important contribution you make
• Balance Your Life through a work life partnership that focuses on making this an inclusive, diverse and friendly place to work and offers the flexibility and support that enables everyone to be at their best

The Role:

This role has arisen as we are building out our IT and Security GRC team, driving a consistent and proactive approach to supporting governance, risk management and controls activities across our technology function and into the wider business.

As a manager with the IT and Security GRC team, you will be responsible for providing leadership and oversight to a team of consultants and analysts, as well as specialist input as required. This will include supporting risk management and risk acceptance activities; maintenance and oversight of standards; maintenance and assurance of the IT controls framework; managing emerging technology risk within projects; supporting other assurance and audit activities relating to technology; and supporting reporting to governance working groups, forums and committees.

Key Responsibilities:

• To manage 1st line information risk and security governance, focussing on raising standards and awareness, as well as providing assurance and monitoring compliance with policies and standards;
• To manage, maintain and assure the IT control framework.
• To establish and promote good practice for managing information technology and information security risk, providing support, advice and information where required;
• To provide guidance, direction and reporting to senior management on a range of information technology and information security risk and control issue;
• To support change functions and in the identification, management and assurance of emerging technology risks arising from projects and other change initiatives; and
• To manage elements of monitoring, demonstrating appropriate management of risk and compliance with policy.

Management accountabilities:

• Show your team how to pull together by being a hands-on manager, and always be fair, open and honest;
• Identify what needs to be done and choose the right people for the job;
• Give each person in your team clear accountabilities and stretching work objectives;
• Take an active lead in helping each person in your team perform to their best and understand how their work contributes to the achievement of business success;
• Evaluate and monitor collective performance to ensure your team is delivering in support of the strategic priorities of the business
• Produce operational plans and manage costs commercially; and
• Recognise successes around what is delivered and how people approach their work.

You will have:

Experience:

• Significant experience of information technology and information security management governance standards (ISO27001, CoBIT, ISF SOGP, SOx, ITIL etc.)
• Significant experience of regulations and legislation associated with technology and information security;
• Significant experience of information technology and information security within Financial Services;
• Experience of project management principles, tools and methodologies
• Experience of project delivery
• Experience of 3rd party risk management (relating to technology and security risks)
• Experience of IT architecture and infrastructure
• Experience of risk management tools and methodologies
• Experience of the systems development lifecycle

Knowledge:

• Knowledge of financial services regulatory and legislative frameworks;
• Good knowledge of industry best practice, good networks/links with external bodies and individuals in the same field;
• Good understanding of M&G and Prudential products and distribution methods – as well as knowledge of broader investment management, life assurance and pensions markets and competitors.

Professional qualifications:

• Relevant professional qualifications.

We live by four behaviours at M&G and we ask all our employees to:

• Inspire Others - Support and encourage each other, creating an environment where everyone can contribute and succeed
• Embrace Change - Be open to change, willing to be challenged and able to adapt quickly and imaginatively to new ideas
• Deliver Results - Focus on outcomes, set high standards and deliver with energy and determination
• Keep it Simple - Cut through complexity and bureaucracy, be clear and decisive and never overcomplicate things

At M&G Diversity and Inclusion is a strategic objective. We know that an inclusive environment makes us more accessible and ensures we attract, engage, promote and retain exceptional people.  We welcome applications from all individuals regardless of age, gender/gender identity, sexual orientation, ethnicity/nationally, disability, or military service and welcome those who have taken career breaks. We will consider flexible working arrangements for any of our roles.