Cyber Risk Analyst — Second-Line Oversight & Insight

M&G; Stirling; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Pension up to 18%

Share Save & Plan

38 days annual leave

Inspiring Families policy

Private Healthcare

Job summary

M&G is recruiting an experienced Cyber Risk Analyst to support the Cyber Risk Consultant in providing independent second-line oversight of first-line cyber security across M&G plc. You will evaluate controls, monitor remediation, engage stakeholders and deliver clear risk insights to enable timely, informed decision-making.

We offer flexible working arrangements and a comprehensive benefits package to support wellbeing.

Qualifications

• 3+ years of experience in cyber security or appropriate technology risk function.
• Well developed stakeholder engagement skills.
• Broad experience in cyber security domains (risk/audit, security architecture, DevSecOps, threat intelligence, vulnerability management, incident response).
• Willingness to stay up to date with the latest technologies in Cyber Risk Management.
• Understanding of second-line activities: risk taxonomy, appetite, KRIs and controls.
• Excellent report-writing and communication skills.
• Able to work in diverse, multi-cultural teams with international exposure.

Responsibilities

• Provide second-line oversight of first-line cyber controls, assessing their design, implementation and effectiveness.
• Review and advise on cyber risk metrics to help maintain risk within appetite.
• Provide second line review for formal risk processes, RCSAs and assurance actions.
• Supporting first-line to track and drive remediation of findings from testing, reviews and incidents, ensuring clear remediation plans and closure.
• Reviewing first-line cyber processes and technical incident responses to identify gaps, root causes and support pragmatic remedial actions.
• Work with colleagues to provide second line oversight of cyber risk mitigation projects and control improvement initiatives to reduce exposure and provide an accurate assessment of risk.
• Communicate risk findings and recommendations clearly to stakeholders, enabling timely, informed decision‑making.

Skills

Stakeholder engagement

Cyber security domains

Risk management

Second line oversight

Incident response

Analytical thinking

Report writing

Communication

Education

Relevant certifications in cyber security, cloud and/or risk

Tools

Risk tracking tools

Job description

M&G is recruiting an experienced Cyber Risk Analyst to support the Cyber Risk Consultant in providing independent second-line oversight of first-line cyber security across M&G plc. You will evaluate controls, monitor remediation, engage stakeholders and deliver clear risk insights to enable timely, informed decision-making.

We offer flexible working arrangements and a comprehensive benefits package to support wellbeing.