Principal Auditor - IT 3rd Party

M&GPrudential; Reading; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Pension up to 18%

Private healthcare

38 days annual leave

Share Save & SIP

Flexible time off

Job summary

M&G is seeking an IT Audit professional to lead technology audits, risk assessments and third-party risk reviews within our Financial Services arm in the UK. You will collaborate with Technology, Information Security and Procurement to strengthen controls and governance.

The role emphasizes leadership, effective stakeholder management and the use of data analytics and AI-enabled auditing tools to improve quality and efficiency.

Qualifications

• Experience delivering Technology Audits, Technology Risk Audits or IT Control Reviews within Financial Services.
• Strong communication, stakeholder management and relationship-building skills.
• Ability to work collaboratively within a high-performing team.

Responsibilities

• Planning & risk assessment: identify risks & controls; prepare risk assessments and testing strategies; use data analytics and AI tools to enhance planning.
• Audit performance: design and perform risk-based testing; assess controls over technology services and third parties; produce high-quality workpapers.
• Audit reporting: communicate findings clearly; draft observations and reports; support remediation discussions; review junior staff work.
• Business partnering: build relationships with Technology, Information Security, Procurement and stakeholders; stay aligned with strategic initiatives.
• Team management: coach and mentor junior auditors; promote collaboration and knowledge sharing; drive use of technology.
• Audit community: contribute to continuous improvement and share best practices in technology risk management and AI-enabled auditing.

Skills

Tech audits

IT risk management

Communication skills

Stakeholder management

Collaboration

Data analytics

AI tools (Copilot)

Education

CISA, CISM, CRISC or equivalent

Tools

Microsoft Copilot

Audit management tools

Data analytics tools

Job description

At M&G, our purpose is to give everyone real confidence to put their money to work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions. Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long-term investment and savings solutions. Through telling it like it is, owning it now and moving it forward together with care and integrity; we are creating an exceptional place to work for exceptional talent. We will consider flexible working arrangements for any of our roles and offer workplace adjustments to ensure you have the support you need to succeed in your role.

Description of the Role

Internal Audit is an independent, objective assurance function that is critical to meeting our business ambitions whilst also protecting the interests of our customers by ensuring that the internal control, risk and governance frameworks are always fit for purpose. We look beyond financial risks and statements to consider wider issues such as the organisation's reputation, growth, its impact on the environment and the way we treat our customers and employees. As an IT Audit Assignment team member and sometimes leader, you will help deliver meaningful improvements across the business by engaging with Technology and other key stakeholders to identify risk and control improvements. You will primarily support audits across Technology, IT Third-Party Risk Management and operational processes, whilst helping to build confidence and presentation skills through exposure to Senior Management. This is a key role within the Internal Audit function for individuals with significant experience in Technology Audit, Technology Risk, Internal Audit or External Audit. The successful candidate will have strong experience leading technology audits, a good understanding of technology security and third-party risk management practices, excellent communication skills and a collaborative approach to working with colleagues and stakeholders. The role is intended to bring the role holder up to the level where they have: a strong understanding of the workings of both a Financial Services Group and an Internal Audit function; a strong understanding of technology risk domains including IT operations, technology security, change management, cloud services, operational resilience and IT third-party risk management; confidence to lead technology audit assignments with minimal supervision; the ability to quickly assess technology and supplier management processes and identify key risks, controls and improvement opportunities; excellent written and verbal communication skills, with the ability to communicate complex matters clearly to both technical and non-technical audiences; strong stakeholder management and influencing skills; a collaborative working style and commitment to supporting team success; and an ability and willingness to leverage technology, data analytics and AI-enabled tools such as Microsoft Copilot to enhance audit effectiveness and efficiency.

Main Responsibilities

Planning & Risk Assessment

• Identifying key technology, supplier and operational risks and controls.
• Preparing audit planning documentation, risk assessments and testing strategies.
• Leveraging data analytics, automation and AI-enabled tools where appropriate to enhance planning and risk assessment activities.

Audit Performance

• Designing and performing risk-based audit testing across technology and operational processes.
• Assessing the effectiveness of controls over technology services, outsourced activities and third-party providers.
• Producing high-quality audit workpapers in accordance with Internal Audit standards.
• Utilising technology, data analytics and tools such as Microsoft Copilot to improve audit delivery and productivity.
• Delivering assignments to agreed quality, budget and timelines.

Audit Reporting

• Communicating audit findings clearly and constructively to stakeholders.
• Drafting high-quality audit observations and reports with minimal supervision.
• Supporting discussions with management to agree actions and remediation plans.
• Reviewing work performed by junior team members where appropriate.

Business Partnering

• Building effective relationships with Technology, Information Security, Procurement, Supplier Management and business stakeholders.
• Maintaining regular engagement with key stakeholders to understand emerging risks and strategic initiatives.
• Acting with integrity, professionalism and objectivity in all interactions.

Team Management

• Supporting, coaching and mentoring junior auditors.
• Providing constructive feedback and helping to develop team capability.
• Promoting collaboration, knowledge sharing and the effective use of technology across the team.

Audit Community

• Participating in initiatives that support continuous improvement of the Internal Audit function.
• Sharing knowledge and best practice relating to technology risk, third‑party risk management and technology-enabled auditing.
• Contributing to a positive and inclusive team environment.

Preferred Experience and Skills

• Experience delivering Technology Audits, Technology Risk Audits or IT Control Reviews within Financial Services.
• Experience of auditing Third‑Party Risk Management, outsourcing arrangements or supplier risk frameworks.
• Good understanding of technology security controls and technology governance practices.
• Strong communication, stakeholder management and relationship‑building skills.
• Demonstrated ability to work collaboratively within a high‑performing team environment.
• Experience using audit management, data analytics and productivity tools.
• Experience using or willingness to leverage AI‑enabled tools such as Microsoft Copilot to improve audit quality and efficiency.

Professional qualifications such as CISA, CISM, CRISC or equivalent would be advantageous.

What we offer

We’re dedicated to supporting your wellbeing and helping you thrive, both at work and beyond. Our benefits are designed to help you balance your professional and personal life, and financially plan for the future.

Our UK benefits include:

• A valuable pension scheme of up to 18% (13% made up of employer contributions and 5% employee contributions).
• Access to our Share Save and Share Incentive Plan, alongside financial wellbeing and support services to help give you real confidence to put your money to work.
• Enjoy 38 days annual leave (including bank holidays), with the opportunity to purchase up to five extra days.
• Our Time Off When You Need It policy gives you the flexibility - to balance work and personal commitments.
• Our market‑leading Inspiring Families policy includes comprehensive support and paid parental leave covering maternity, adoption, surrogacy, and paternity leave - because supporting families is an important part of our inclusive culture.
• Health & Protection cover includes Private Healthcare, Critical Illness cover and Life Assurance for you, with additional family options - for peace of mind.

At M&G we strive to have a diverse workforce and an inclusive culture, underpinned by our policies and employee‑led networks that offer networking, support and development opportunities for the diverse communities our colleagues represent.

We welcome applications from people of all backgrounds – across gender, ethnicity, age, disability, sexual orientation and more – including neurodivergent individuals, career returners and those with military service experience.

M&G is proud to be Level 3: Disability Confident Leader under the UK Government Disability Confident employer scheme, and we welcome applications from candidates with disabilities and long‑term health conditions.

We are committed to providing an inclusive recruitment process. All candidates have the opportunity to request reasonable adjustments when applying.

M&G is a leading international savings and investments business, managing money for around 4.6 million individual clients and more than 900 institutional clients in 38 offices worldwide. As at 31 December 2024, we had £345.9 billion of assets under management and administration. Our purpose is to give everyone real confidence to put their money to work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions. Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long‑term investment and savings solutions.