Principal Auditor - Technology and Security
M&GEdinburgh, Scotland, United Kingdom
Added 29 Jul · still live
Not disclosed
Salary
Not disclosed by employer
£48,500
Going rate
Skilled Worker going rate
This role may qualify for a Skilled Worker visa
SOC 2135 is an eligible occupation, but we classified this role with low confidence (54% match). If the code is right — and M&G is a licensed sponsor — it should qualify, but double-check the occupation eligibility rules against the actual role.
About the role
At M&G, our purpose is to give everyone real confidence to put their money to work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions.
Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long-term investment and savings solutions.
Through telling it like it is, owning it now and moving it forward together with care and integrity; we are creating an exceptional place to work for exceptional talent.
We will consider flexible working arrangements for any of our roles and offer workplace adjustments to ensure you have the support you need to succeed in your role.
Description Of The Role
Internal Audit is an independent, objective assurance function that is critical to meeting our business ambitions whilst also protecting the interests of our customers by ensuring that the internal control, risk and governance frameworks are always fit for purpose. We look beyond financial risks and statements to consider wider issues such as the organisation's reputation, growth, its impact on the environment and the way we treat our customers and employees.
As a Principal Information Technology Auditor, you will be responsible for providing independent assurance over the effectiveness of technology security, cyber security and infrastructure controls across the organisation. Working closely with Technology, Information Security and business stakeholders, you will perform and support audits covering areas such as network security, cloud security, identity and access management, infrastructure security, vulnerability management, security operations, databases, operating systems and other critical technology platforms.
This is a key role within the Internal Audit function for an experienced technology security professional with strong technical audit expertise. The successful candidate will be capable of independently planning and executing audit fieldwork, leading walkthrough discussions with stakeholders, assessing controls and identifying risks and control weaknesses with minimal supervision.
The role is intended to bring the role holder up to the level where they have:
Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long-term investment and savings solutions.
Through telling it like it is, owning it now and moving it forward together with care and integrity; we are creating an exceptional place to work for exceptional talent.
We will consider flexible working arrangements for any of our roles and offer workplace adjustments to ensure you have the support you need to succeed in your role.
Description Of The Role
Internal Audit is an independent, objective assurance function that is critical to meeting our business ambitions whilst also protecting the interests of our customers by ensuring that the internal control, risk and governance frameworks are always fit for purpose. We look beyond financial risks and statements to consider wider issues such as the organisation's reputation, growth, its impact on the environment and the way we treat our customers and employees.
As a Principal Information Technology Auditor, you will be responsible for providing independent assurance over the effectiveness of technology security, cyber security and infrastructure controls across the organisation. Working closely with Technology, Information Security and business stakeholders, you will perform and support audits covering areas such as network security, cloud security, identity and access management, infrastructure security, vulnerability management, security operations, databases, operating systems and other critical technology platforms.
This is a key role within the Internal Audit function for an experienced technology security professional with strong technical audit expertise. The successful candidate will be capable of independently planning and executing audit fieldwork, leading walkthrough discussions with stakeholders, assessing controls and identifying risks and control weaknesses with minimal supervision.
The role is intended to bring the role holder up to the level where they have:
- strong knowledge of Digital security and Technology resilience risks, controls and industry good practice;
- be highly motivated, proactive and capable of working independently;
- possess strong technical curiosity and a desire to remain current with evolving cyber threats and technology security developments;
- demonstrate strong analytical and problem-solving capabilities;
- have excellent attention to detail and a disciplined approach to audit execution;
- be a strong team player who contributes positively to team objectives and supports colleagues;
- communicate technical matters clearly, concisely and confidently;
- be able to translate technical risks and control weaknesses into business-focused language;
- build trusted relationships with stakeholders across Technology and Information Security functions;
Planning & Risk Assessment
- Supporting the planning and scoping of technology security audits.
- Identifying key cyber security, infrastructure and technology risks relevant to audit objectives.
- Reviewing documentation, architectures, standards, procedures and control frameworks.
- Developing audit testing approaches for complex technical environments.
- Leveraging data analytics, automation and AI-enabled tools where appropriate to enhance audit activities.
- Independently performing audit testing across technology security, cyber security and infrastructure domains.
- Leading walkthrough meetings with Technology and Information Security stakeholders to understand processes, controls and technologies.
- Assessing the design and operating effectiveness of security controls across networks, databases, operating systems, cloud platforms and infrastructure services.
- Reviewing controls relating to identity and access management, privileged access, vulnerability management, security monitoring, incident management and infrastructure hardening.
- Evaluating technical evidence to determine whether controls are appropriately designed and operating effectively.
- Producing high-quality workpapers and audit evidence in accordance with Internal Audit standards.
- Delivering assigned work to agreed quality standards and timelines with minimal supervision.
- Translating complex technical findings into clear business-focused risk and control observations.
- Drafting high-quality audit observations that clearly articulate risks, impacts, root causes and recommendations.
- Building effective relationships with Information Security, Technology Infrastructure, Engineering and Cyber Security stakeholders.
- Establishing credibility through technical expertise, professionalism and constructive challenge.
- Maintaining an understanding of key technology initiatives, security programmes and emerging risks.
- Providing objective and balanced challenge whilst maintaining positive working relationships.
- Contributing positively to a collaborative and inclusive team environment.
- Supporting junior auditors through coaching, knowledge sharing and informal mentoring.
- Sharing technical expertise and industry good practice across the Internal Audit function.
- Working effectively with colleagues across multiple audit assignments and initiatives.
- Supporting the continuous improvement of technology audit methodologies and practices.
- Sharing knowledge relating to cyber security, technology security and infrastructure risk management.
- Promoting the effective use of data analytics, automation and AI-enabled tools such as Microsoft Copilot.
- Contributing to audit innovation and continuous improvement initiatives.
- Significant experience performing Technology Security Audits and Cyber Security Audits within Financial Services or similarly regulated environments.
- Strong technical knowledge of:
- Network Security and Network Architecture
We’re dedicated to supporting your wellbeing and helping you thrive, both at work and beyond. Our benefits are designed to help you balance your professional and personal life, and financially plan for the future. Our UK benefits include:
- A valuable pension scheme of up to 18% (13% made up of employer contributions and 5% employee contributions).
- Access to our Share Save and Share Incentive Plan, alongside financial wellbeing and support services to help give you real confidence to put your money to work.
- Enjoy 38 days annual leave (including bank holidays), with the opportunity to purchase up to five extra days. Our Time Off When You Need It policy gives you the flexibility - to balance work and personal commitments.
At M&G we strive to have a diverse workforce and an inclusive culture, underpinned by our policies and employee-led networks that offer networking, support and development opportunities for the diverse communities our colleagues represent. We welcome applications from people of all backgrounds – across gender, ethnicity, age, disability, sexual orientation and more – including neurodivergent individuals, career returners and those with military service experience.
M&G is proud to be Level 3: Disability Confident Leader under the UK Government Disability Confident employer scheme, and we welcome applications from candidates with disabilities and long-term health conditions. If you would like to participate in the initiative, you will have the opportunity to indicate this on your application.
We are committed to providing an inclusive recruitment process. All candidates have the opportunity to request reasonable adjustments when applying. If you need any additional support at any stage, please contact us at: careers@mandg.com
This description is the source posting as it read when we added it. We are not affiliated with M&G, so check their own site for the current details.
Where this offer sits in the market
SOC 2135 · UK · ONS ASHE 2025 · ~26k in sampleP25 £43kP75 £72k
£32kmedian £55kgoing rate £49k£72k
Similar sponsored roles
See all jobsNo close matches live right now.
Browse more sponsored jobs at M&G →About sponsorship for this role
Does this job guarantee visa sponsorship?
Not necessarily. M&G holds a sponsor licence, but sponsorship for a specific hire is always the employer's decision. Be upfront in your application that you'll require it.
What salary is needed for this role to be eligible?
The offer must clear both the general threshold and the SOC 2135 going rate of £48,500. New-entrant and shortage discounts can lower it.