Assistant Vice President - Controls Assurance

Job description

About M&G India We are M&G India, the strategic innovation and digital hub for M&G. Established in 2003, we have offices in Mumbai and Pune. Our teams work closely with colleagues across the Group worldwide to drive transformation, build digital capability, and support sustainable growth. By leveraging technology, AI, automation, and process excellence, we bring new ways of thinking to improve outcomes for both customers and colleagues. Grounded in a vibrant culture with strong foundations, we are central to how M&G is transforming as a business. About M&G Our purpose is to give everyone real confidence to put their money to work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions. Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long-term investment and savings solutions. Through telling it like it is, owning it now, and moving it forward together with care and integrity; we are creating an exceptional place to work for exceptional talent. The Technology Governance Risk and Controls (GRC) function provides oversight of policy, standards, risks and controls across different areas. The function drives a better understanding of first line risks and will support, advise and facilitate the leadership team in actively managing risk by making decisions regarding the need for remedial actions and/or risk acceptances taking into account: • The current First Line GRC risk profile and control environment; • The relative scale of exposure and their likelihood; and • The cost and effort of remediating those exposures. The policies and control frameworks managed by the team include Information Technology, Operational Resilience, Third Party Risk Management, Data and Privacy. The primary role of the AVP is to perform control testing across Third Party Risk Management, Operational Resilience, Data & Privacy areas and support the development and improvements of the control framework across all areas managed by TGRC to ensure that it remains aligned to the M&G risk appetite. This includes, but is not limited to, understanding the external requirements (by regulators and industry bodies) and the organisation’s strategy, vision and direction, external and internal emerging risk, and working closely with other leads in the function and wider M&G to understand the control framework and recommend improvements of policy, standards and control requirements. This will include overall assessment of the implementation of the control framework and will be supporting control owners to define corrective actions when gaps are identified. In addition, the role will support oversight of the Technology controls testing team and the issue assurance process providing validation of issue closure packs. • Performing control testing across the Technology, Third Party Risk Management, Operational Resilience, Data & Privacy functions • Ensuring our stakeholders are integrated and work consistently across GRC and relevant M&G plc risk framework, policies, processes and ways of working. • Providing on-going oversight, governance & reporting over the risk areas covered by TGRC. • Track and review issue closure pack and support the Issue Assurance processes • Supporting management with the remediation of any control gaps or implementation of control improvements • Deliver the service with support of resources provided by a third party. • Build strong professional relationships with key stakeholders and senior leaders across Technology to capture appropriate risk metric data. • Actively identify new approaches that enhance efficiency and the business impact of the IT risk landscapes. • Support the Head of Controls Assurance with reporting status updates and testing outcomes to senior stakeholders. Knowledge & skills • Strong knowledge and understanding of the business, their processes and ambition are essential. • Detailed knowledge and practical experience with risk management practices and frameworks. • Working knowledge of collaboration tools and new technologies with the ability to champion team learning and coach business colleagues when required. • Essential knowledge of three lines of defence practice. • Working knowledge of Financial Services, Technology industries and regulatory requirements in relation to IT risk, outsourcing and operational resilience. • Experience of third party relationships and the Information Technology and security risks created. • Certifications like CISA /CRISC would be advantageous. • Ability to translate technical and risk requirements and specifications into easily understood business concepts and vice versa. • Able to determine risk profiles and to be accountable for these judgements and for the business activities undertaken to address them. • Ability to build relationships at all levels in the business. • Good organisational and system automation skills. • Ability to drive activities in collaboration with colleagues in other areas. • Excellent communication, verbal and written, and stakeholder management skills. • Remain effective in situations when responsibilities, tasks, priorities and / or work environment change significantly. • Commercial awareness across IT marketplace including offshore marketplace and supplier knowledge. We have a diverse workforce and an inclusive culture at M&G Global Services, regardless of gender, ethnicity, age, sexual orientation, nationality, disability or long term condition, we are looking to attract, promote and retain exceptional people. We also welcome those who take part in military service and those returning from career breaks.