Cyber Risk Analyst
Core
Provide independent second-line oversight of first-line cyber security controls, assess their design and effectiveness, and drive remediation of findings across M&G plc.
Role type
Second-line cyber risk analyst (IC)
Builds
Independent risk assurance and control improvement initiatives for the Technology Risk Team
Domain
Financial services / Cyber risk management
Deliverable
dashboards & analysis
Required skills
Cyber security risk assessment, stakeholder engagement, risk metrics analysis, remediation tracking, root cause analysis, gap analysis against standards, report writing
Preferred skills
Understanding of security architecture, DevSecOps, threat intelligence, vulnerability management, incident response, red teaming outputs, cloud security, AI applications
Technologies
Risk/issue tracking tools, enterprise security products, cloud platforms
Responsibilities
Evaluate and challenge first-line risk and controls posture; Review and advise on cyber risk metrics; Provide second-line review for formal risk processes and RCSAs; Support tracking and driving remediation of testing and incident findings; Review first-line incident responses to identify gaps and root causes; Communicate risk findings and recommendations to stakeholders
Seniority
Experienced, hands-on IC