Senior Manager 2B - Controls Assurance

Job description

About M&G India We are M&G India, the strategic innovation and digital hub for M&G. Established in 2003, we have offices in Mumbai and Pune. Our teams work closely with colleagues across the Group worldwide to drive transformation, build digital capability, and support sustainable growth. By leveraging technology, AI, automation, and process excellence, we bring new ways of thinking to improve outcomes for both customers and colleagues. Grounded in a vibrant culture with strong foundations, we are central to how M&G is transforming as a business. About M&G Our purpose is to give everyone real confidence to put their money to work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions. Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long-term investment and savings solutions. Through telling it like it is, owning it now, and moving it forward together with care and integrity; we are creating an exceptional place to work for exceptional talent. The Technology Governance Risk and Controls (TGRC) function provides oversight of policy, standards, risks and controls across different areas. The function drives a better understanding of first line risks and will support, advise and facilitate the leadership team in actively managing risk by making decisions regarding the need for remedial actions and/or risk acceptances taking into account: • The current First Line GRC risk profile and control environment; • The relative scale of exposure and their likelihood; and • The cost and effort of remediating those exposures. The policies and control frameworks managed by the team include Information Technology, Operational Resilience, Third Party Risk Management, Data and Privacy. The primary role of the Controls Assurance Senior Manager is to work with the Assistant Vice President / Vice President to perform control testing across Technology, Third Party Risk Management, Operational Resilience, Data & Privacy areas and support the development and improvements of the control framework across all areas managed by First Line GRC to ensure that it remains aligned to the M&G risk appetite. This will include overall assessment of the implementation of the control framework and will be supporting control owners to define corrective actions when gaps are identified. In addition, the role will support the Technology controls testing team and the issue assurance process providing validation of issue closure packs. • Performing control testing across the Technology, Third Party Risk Management, Operational Resilience, Data & Privacy functions • Supporting the Issue Assurance processes • Supporting management with the remediation of any control gaps or implementation of control improvements • Support AVP/VP in carrying out control testing and issue assurance. Additional Responsibilities - • Build strong professional relationships with key stakeholders and senior leaders across Technology to capture appropriate risk metric data. • Work closely with AVP/VP and help identify new approaches that enhance efficiency and the business impact of the IT risk landscapes. • Support the Control Assurance Lead with reporting status updates to the Leadership team/Senior Stakeholders. • Working flexibly and building collaboratively constructive and supportive working relationships with teams across M&G plc and suppliers. • Keep abreast of industry trends, regulatory and business issues. • Use of regulatory knowledge, business understanding and expert judgement, to quickly identify underlying issues and escalate issues, where appropriate. Knowledge: • Strong knowledge and understanding of the business, their processes and ambition are essential. • Detailed knowledge and practical experience with risk management practices and frameworks. • Working knowledge of collaboration tools and new technologies with the ability to champion team learning and coach business colleagues when required. • Essential knowledge of three lines of defence practice. • Working knowledge of Financial Services, Technology industries and regulatory requirements in relation to IT risk, outsourcing and operational resilience. • Experience of third party relationships and the Information Technology and security risks created. • Certifications like CRISC/CISA would be advantageous. Skills: • Ability to translate technical and risk requirements and specifications into easily understood business concepts and vice versa. • Able to determine risk profiles and to be accountable for these judgements and for the business activities undertaken to address them. • Ability to build relationships at all levels in the business. • Good organisational and system automation skills. • Ability to drive activities in collaboration with colleagues in other areas. • Excellent communication, verbal and written, and stakeholder management skills. • Remain effective in situations when responsibilities, tasks, priorities and / or work environment change significantly. • Commercial awareness across IT marketplace including offshore marketplace and supplier knowledge. We have a diverse workforce and an inclusive culture at M&G Global Services, regardless of gender, ethnicity, age, sexual orientation, nationality, disability or long term condition, we are looking to attract, promote and retain exceptional people. We also welcome those who take part in military service and those returning from career breaks.