Principal Auditor - IT 3rd Party in Edinburgh

At M&G, our purpose is to give everyone real confidence to put their money to work.

With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions.

Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long-term investment and savings solutions.

Through telling it like it is, owning it now and moving it forward together with care and integrity; we are creating an exceptional place to work for exceptional talent.

We will consider flexible working arrangements for any of our roles and offer workplace adjustments to ensure you have the support you need to succeed in your role.

Description of the Role

Internal Audit is an independent, objective assurance function that is critical to meeting our business ambitions whilst also protecting the interests of our customers by ensuring that the internal control, risk and governance frameworks are always fit for purpose.

We look beyond financial risks and statements to consider wider issues such as the organisation's reputation, growth, its impact on the environment and the way we treat our customers and employees.

As an IT Audit Assignment team member and sometimes leader, you will help deliver meaningful improvements across the business by engaging with Technology and other key stakeholders to identify risk and control improvements.

You will primarily support audits across Technology, IT Third-Party Risk Management and operational processes, whilst helping to build confidence and presentation skills through exposure to Senior Management.

This is a key role within the Internal Audit function for individuals with significant experience in Technology Audit, Technology Risk, Internal Audit or External Audit.

The successful candidate will have strong experience leading technology audits, a good understanding of technology security and third-party risk management practices, excellent communication skills and a collaborative approach to working with colleagues and stakeholders.

• The role is intended to bring the role holder up to the level where they have:
• a strong understanding of the workings of both a Financial Services Group and an Internal Audit function;
• a strong understanding of technology risk domains including IT operations, technology security, change management, cloud services, operational resilience and IT third-party risk management;
• confidence to lead technology audit assignments with minimal supervision;
• the ability to quickly assess technology and supplier management processes and identify key risks, controls and improvement opportunities;
• excellent written and verbal communication skills, with the ability to communicate complex matters clearly to both technical and non-technical audiences;
• strong stakeholder management and influencing skills;
• a collaborative working style and commitment to supporting team success; and
• an ability and willingness to leverage technology, data analytics and AI-enabled tools such as Microsoft Copilot to enhance audit effectiveness and efficiency.
• To Succeed You Will Need to Demonstrate the Following Qualities
• be eager to learn, take ownership and embrace new challenges;
• build strong relationships and work collaboratively across teams;
• communicate clearly, confidently and effectively;
• challenge constructively whilst remaining open to challenge from others;
• be a strong team player who supports colleagues and contributes positively to team culture;
• lead, motivate and develop others;
• analyse information quickly and exercise sound judgement; and
• demonstrate curiosity regarding emerging technology and third-party risks.
• Your Main Responsibilities Will Include
• Planning & Risk Assessment
• Supporting the planning and scoping of technology audit assignments.
• Identifying key technology, supplier and operational risks and controls.
• Preparing audit planning documentation, risk assessments and testing strategies.
• Leveraging data analytics, automation and AI-enabled tools where appropriate to enhance planning and risk assessment activities.
• Audit Performance
• Designing and performing risk-based audit testing across technology and operational processes.
• Assessing the effectiveness of controls over technology services, outsourced activities and third-party providers.
• Producing high-quality audit workpapers in accordance with Internal Audit standards.
• Utilising technology, data analytics and tools such as Microsoft Copilot to improve audit delivery and productivity.
• Delivering assignments to agreed quality, budget and timelines.
• Audit Reporting
• Communicating audit findings clearly and constructively to stakeholders.
• Drafting high-quality audit observations and reports with minimal supervision.
• Supporting discussions with management to agree actions and remediation plans.
• Reviewing work performed by junior team members where appropriate.
• Business Partnering
• Building effective relationships with Technology, Information Security, Procurement, Supplier Management and business stakeholders.
• Maintaining regular engagement with key stakeholders to understand emerging risks and strategic initiatives.
• Acting with integrity, professionalism and objectivity in all interactions.
• Team Management
• Supporting, coaching and mentoring junior auditors.
• Providing constructive feedback and helping to develop team capability.
• Promoting collaboration, knowledge sharing and the effective use of technology across the team.
• Audit Community
• Participating in initiatives that support continuous improvement of the Internal Audit function.
• Sharing knowledge and best practice relating to technology risk, third-party risk management and technology-enabled auditing.
• Contributing to a positive and inclusive team environment.
• Preferred Experience and Skills
• Experience delivering Technology Audits, Technology Risk Audits or IT Control Reviews within Financial Services.
• Experience of auditing Third-Party Risk Management, outsourcing arrangements or supplier risk frameworks.
• Good understanding of technology security controls and technology governance practices.
• Strong communication, stakeholder management and relationship-building skills.
• Demonstrated ability to work collaboratively within a high-performing team environment.
• Experience using audit management, data analytics and productivity tools.
• Experience using or willingness to leverage AI-enabled tools such as Microsoft Copilot to improve audit quality and efficiency.
• Professional qualifications such as CISA, CISM, CRISC or equivalent would be advantageous

What we offer

We’re dedicated to supporting your wellbeing and helping you thrive, both at work and beyond. Our benefits are designed to help you balance your professional and personal life , and financially plan for the future.

Our UK benefits include

• A valuable pension scheme of up to 18%

(13% made up of employer contributions and 5% employee contributions).

• Access to our
• Share Save and

Share Incentive Plan, alongside financial wellbeing and support services to help give you real confidence to put your money to work.

• Enjoy 38 days annual leave (including bank holidays), with the opportunity to purchase up to five extra days. Our

Time Off When You Need It policy gives you the flexibility - to balance work and personal commitments.

• Our market-leading

Inspiring Families policy includes comprehensive support and paid parental leave covering maternity, adoption, surrogacy, and paternity leave - because supporting families is an important part of our inclusive culture.

• Health & Protection cover includes
• Private Healthcare, Critical Illness cover and

Life Assurance for you, with additional family options - for peace of mind.

• To explore more about life at M&G and our full benefits offering, visit
• Life at M&G

At M&G we strive to have a diverse workforce and an inclusive culture, underpinned by our policies and employee-led networks that offer networking, support and development opportunities for the diverse communities our colleagues represent.

We welcome applications from people of all backgrounds – across gender, ethnicity, age, disability, sexual orientation and more – including neurodivergent individuals, career returners and those with military service experience.

M&G is proud to be

Level 3

Disability Confident Leader under the UK Government Disability Confident employer scheme, and we welcome applications from candidates with disabilities and long-term health conditions.

If you would like to participate in the initiative, you will have the opportunity to indicate this on your application.

We are committed to providing an inclusive recruitment process.

All candidates have the opportunity to request reasonable adjustments when applying.

If you need any additional support at any stage, please contact us at

careers@mandg. com