[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-cyber-risk-analyst-prudential-uk-services-ltd-de-gb":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":11,"featured_until":7,"is_active":12,"deactivated_at":7,"is_enriched":12,"processed_job_posting_json":13,"processed_latitude":75,"processed_longitude":76,"processed_employment_types":77,"processed_working_hours":78,"processed_working_hours_labels":80,"processed_home_office":81,"processed_salary_min":72,"processed_salary_max":73,"processed_salary_currency":69,"processed_salary_source":82,"processed_benefits":83,"processed_benefits_labels":94,"processed_industry":95,"processed_skills":7,"processed_job_location":96,"processed_full_address_gmaps":98,"processed_street_gmaps":100,"processed_city_gmaps":102,"processed_postal_code_gmaps":103,"processed_country_gmaps":104,"processed_country_iso_code_gmaps":106,"full_description":16,"formatted_description":107,"processed_employment_types_labels":35,"processed_home_office_labels":33,"processed_industry_labels":37,"processed_it_skills":108,"processed_it_skills_labels":111,"processed_soft_skills":112,"processed_soft_skills_labels":114,"processed_job_expertise_skills":115,"processed_job_expertise_skills_labels":116,"processed_language_requirements":117,"processed_total_experience_years":110,"processed_professional_field":124,"processed_professional_field_labels":127,"processed_leadership_role":11,"processed_date_posted":19,"raw_job_url":128,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":95,"canonical_industry_label":37,"max_cpc":129,"actual_cpc":7},75348,"cyber-risk-analyst-prudential-uk-services-ltd","Cyber Risk Analyst",null,{"name":9,"slug":10,"logo_url":7},"Prudential UK Services Ltd","prudential-uk-services-ltd",false,true,{"@context":14,"@type":15,"title":6,"description":16,"hiringOrganization":17,"datePosted":19,"validThrough":20,"jobLocation":21,"jobLocationType":33,"employmentType":34,"industry":36,"skills":38,"baseSalary":67},"https:\u002F\u002Fschema.org\u002F","JobPosting","At M&G, our purpose is to give everyone real confidence to put their money to work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions. Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long-term investment and savings solutions. Through telling it like it is, owning it now and moving it forward together with care and integrity; we are creating an exceptional place to work for exceptional talent. We will consider flexible working arrangements for any of our roles and offer workplace adjustments to ensure you have the support you need to succeed in your role. Context: The Cyber Risk Analyst reports to the Cyber Risk Consultant and is part of the Technology Risk Team, which forms part of the Second Line of Defence in the Non-Financial Risk function. The Cyber Risk Analyst will support the Cyber Risk Consultant in providing independent second-line oversight of first-line cyber security across M&G plc. You will be a subject matter expert who: Evaluates, challenges and supports first-line on their Risk and Controls posture, associated testing and remediation. Manages stakeholder engagement and monitors remediation efforts to drive positive outcomes. Provides specialist cyber and technology risk advice to the Non-Financial Risk team and the wider business. This role sits within Risk & Compliance and focuses on delivering clear, independent insight to support informed decision-making. Key Responsibilities: The key responsibilities of this role are to support the delivery of second line cyber risk oversight of first line cyber security. This involves: Providing second-line oversight of first‑line cyber controls, assessing their design, implementation and effectiveness. Review and advise on suitable cyber risk metrics to help maintain risk within appetite. Provide second line review for formal risk processes, RCSAs and assurance actions. Supporting first-line to track and drive remediation of findings from testing, reviews and incidents, ensuring clear remediation plans and closure. Reviewing first-line cyber processes and technical incident responses to identify gaps, root causes and support pragmatic remedial actions. Work with colleagues to provide second line oversight of cyber risk mitigation projects and control improvement initiatives to reduce exposure and provide an accurate assessment of risk. Communicate risk findings and recommendations clearly to stakeholders, enabling timely, informed decision‑making. Key Knowledge, Skills & Experience: 3+ years of experience in cyber security or appropriate technology risk function (essential) Well developed stakeholder engagement skills (essential) Broad experience or demonstrable understanding of cyber security domains, such as; risk\u002Faudit management, security architecture, DevSec Ops, threat intelligence, vulnerability management and incident response (essential) A willingness to stay up to date with the latest technologies and approaches within Cyber Risk Management (essential) General understanding of second-line activities: risk taxonomy, appetite, KRIs and controls (essential) Curious, analytical and pragmatic problem-solver Experience with reviewing the outputs of red teaming, penetration testing or vulnerability scanning and assessing their significance An awareness and interest in AI and the associated applications Knowledge of enterprise security products and cloud Comfortable with risk\u002Fissue tracking tools, risk reviews and clear stakeholder reporting Able to produce gap analyses against policies\u002Fstandards using industry best practice Excellent report-writing and communication skills Able to work in diverse, multi-cultural teams with international exposure Useful Education and Professional Qualifications: Relevant certifications in cyber security, cloud and\u002For risk Experience Level: Experienced Colleague Recruiter: Helen Simons What we offer: We’re dedicated to supporting your wellbeing and helping you thrive, both at work and beyond. Our benefits are designed to help you balance your professional and personal life, and financially plan for the future. Our UK benefits include: A valuable pension scheme of up to 18% (13% made up of employer contributions and 5% employee contributions). Access to our Share Save and Share Incentive Plan, alongside financial wellbeing and support services to help give you real confidence to put your money to work. Enjoy 38 days annual leave (including bank holidays), with the opportunity to purchase up to five extra days. Our Time Off When You Need It policy gives you the flexibility - to balance work and personal commitments. Our market-leading Inspiring Families policy includes comprehensive support and paid parental leave covering maternity, adoption, surrogacy, and paternity leave - because supporting families is an important part of our inclusive culture. Health & Protection cover includes Private Healthcare, Critical Illness cover and Life Assurance for you, with additional family options - for peace of mind. To explore more about life at M&G and our full benefits offering, visit Life at M&G At M&G we strive to have a diverse workforce and an inclusive culture, underpinned by our policies and employee-led networks that offer networking, support and development opportunities for the diverse communities our colleagues represent. We welcome applications from people of all backgrounds – across gender, ethnicity, age, disability, sexual orientation and more – including neurodivergent individuals, career returners and those with military service experience. M&G is proud to be Level 3: Disability Confident Leader under the UK Government Disability Confident employer scheme, and we welcome applications from candidates with disabilities and long-term health conditions. If you would like to participate in the initiative, you will have the opportunity to indicate this on your application. We are committed to providing an inclusive recruitment process. All candidates have the opportunity to request reasonable adjustments when applying. If you need any additional support at any stage, please contact us at: careers@mandg.com M&G is a leading international savings and investments business, managing money for around 4.6 million individual clients and more than 900 institutional clients in 38 offices worldwide. As at 31 December 2024, we had £345.9 billion of assets under management and administration. Our purpose is to give everyone real confidence to put their money to work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions. Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long-term investment and savings solutions.",{"@type":18,"name":9},"Organization","2026-09-16","2027-09-16",[22],{"@type":23,"address":24,"geo":29},"Place",{"@type":25,"addressLocality":26,"addressCountry":27,"addressRegion":28},"PostalAddress","Stirling","GB","Scotland",{"@type":30,"latitude":31,"longitude":32},"GeoCoordinates",56.1346633,-3.9618523,"HYBRID",[35],"PERMANENT",[37],"Financial Services",[39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66],"DevSecOps","Cloud Security","AI Awareness","Enterprise Security Products","Risk\u002FIssue Tracking Tools","Stakeholder Engagement","Communication","Report Writing","Analytical Thinking","Problem Solving","Teamwork","Cyber Security","Technology Risk Management","Risk and Controls Assessment","Security Architecture","Threat Intelligence","Vulnerability Management","Incident Response","Risk Taxonomy","Key Risk Indicators (KRIs)","Red Teaming","Penetration Testing","Vulnerability Scanning","Gap Analysis","Risk Mitigation","Control Improvement","RCSA","Assurance Actions",{"@type":68,"currency":69,"value":70},"MonetaryAmount","GBP",{"@type":71,"minValue":72,"maxValue":73,"unitText":74},"QuantitativeValue",50000,70000,"YEAR",[31],[32],"permanent",[79],"FULL_TIME",[79],"hybrid","estimated",[84,85,86,87,88,89,90,91,92,93],"Pension scheme up to 18%","Share Save and Share Incentive Plan","38 days annual leave including bank holidays","Option to purchase up to five extra days of leave","Time Off When You Need It policy","Inspiring Families policy with paid parental leave","Private Healthcare","Critical Illness cover","Life Assurance","Financial wellbeing and support services",[84,85,86,87,88,89,90,91,92,93],"financial services",[97],"prudential, kildean, united kingdom",[99],"Kildean Rd, Stirling, Vereinigtes Königreich",[101],"Kildean Road",[26],[],[105],"Vereinigtes Königreich",[27],"At M&G, our purpose is to give everyone real confidence to put their money to work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions. Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long-term investment and savings solutions.\n\nThrough telling it like it is, owning it now and moving it forward together with care and integrity; we are creating an exceptional place to work for exceptional talent.\n\nWe will consider flexible working arrangements for any of our roles and offer workplace adjustments to ensure you have the support you need to succeed in your role.\n\n## Context:\n\nThe Cyber Risk Analyst reports to the Cyber Risk Consultant and is part of the Technology Risk Team, which forms part of the Second Line of Defence in the Non-Financial Risk function.\n\nThe Cyber Risk Analyst will support the Cyber Risk Consultant in providing independent second-line oversight of first-line cyber security across M&G plc.\n\nYou will be a subject matter expert who:\n\n- Evaluates, challenges and supports first-line on their Risk and Controls posture, associated testing and remediation.\n- Manages stakeholder engagement and monitors remediation efforts to drive positive outcomes.\n- Provides specialist cyber and technology risk advice to the Non-Financial Risk team and the wider business.\n\nThis role sits within Risk & Compliance and focuses on delivering clear, independent insight to support informed decision-making.\n\n## Key Responsibilities:\n\nThe key responsibilities of this role are to support the delivery of second line cyber risk oversight of first line cyber security. This involves:\n\n- Providing second-line oversight of first‑line cyber controls, assessing their design, implementation and effectiveness.\n- Review and advise on suitable cyber risk metrics to help maintain risk within appetite.\n- Provide second line review for formal risk processes, RCSAs and assurance actions.\n- Supporting first-line to track and drive remediation of findings from testing, reviews and incidents, ensuring clear remediation plans and closure.\n- Reviewing first-line cyber processes and technical incident responses to identify gaps, root causes and support pragmatic remedial actions.\n- Work with colleagues to provide second line oversight of cyber risk mitigation projects and control improvement initiatives to reduce exposure and provide an accurate assessment of risk.\n- Communicate risk findings and recommendations clearly to stakeholders, enabling timely, informed decision‑making.\n\n## Key Knowledge, Skills & Experience:\n\n- 3+ years of experience in cyber security or appropriate technology risk function (essential)\n- Well developed stakeholder engagement skills (essential)\n- Broad experience or demonstrable understanding of cyber security domains, such as; risk\u002Faudit management, security architecture, DevSec Ops, threat intelligence, vulnerability management and incident response (essential)\n- A willingness to stay up to date with the latest technologies and approaches within Cyber Risk Management (essential)\n- General understanding of second-line activities: risk taxonomy, appetite, KRIs and controls (essential)\n- Curious, analytical and pragmatic problem-solver\n- Experience with reviewing the outputs of red teaming, penetration testing or vulnerability scanning and assessing their significance\n- An awareness and interest in AI and the associated applications\n- Knowledge of enterprise security products and cloud\n- Comfortable with risk\u002Fissue tracking tools, risk reviews and clear stakeholder reporting\n- Able to produce gap analyses against policies\u002Fstandards using industry best practice\n- Excellent report-writing and communication skills\n- Able to work in diverse, multi-cultural teams with international exposure\n\n## Useful Education and Professional Qualifications:\n\n- Relevant certifications in cyber security, cloud and\u002For risk\n\n## Experience Level:\n\nExperienced Colleague\n\nRecruiter: Helen Simons\n\n## What we offer:\n\nWe’re dedicated to supporting your wellbeing and helping you thrive, both at work and beyond. Our benefits are designed to help you balance your professional and personal life, and financially plan for the future.\n\nOur UK benefits include:\n\n- A valuable pension scheme of up to 18% (13% made up of employer contributions and 5% employee contributions).\n- Access to our Share Save and Share Incentive Plan, alongside financial wellbeing and support services to help give you real confidence to put your money to work.\n- Enjoy 38 days annual leave (including bank holidays), with the opportunity to purchase up to five extra days.\n- Our Time Off When You Need It policy gives you the flexibility - to balance work and personal commitments.\n- Our market-leading Inspiring Families policy includes comprehensive support and paid parental leave covering maternity, adoption, surrogacy, and paternity leave - because supporting families is an important part of our inclusive culture.\n- Health & Protection cover includes Private Healthcare, Critical Illness cover and Life Assurance for you, with additional family options - for peace of mind.\n\nTo explore more about life at M&G and our full benefits offering, visit Life at M&G\n\nAt M&G we strive to have a diverse workforce and an inclusive culture, underpinned by our policies and employee-led networks that offer networking, support and development opportunities for the diverse communities our colleagues represent.\n\nWe welcome applications from people of all backgrounds – across gender, ethnicity, age, disability, sexual orientation and more – including neurodivergent individuals, career returners and those with military service experience.\n\nM&G is proud to be Level 3: Disability Confident Leader under the UK Government Disability Confident employer scheme, and we welcome applications from candidates with disabilities and long-term health conditions. If you would like to participate in the initiative, you will have the opportunity to indicate this on your application.\n\nWe are committed to providing an inclusive recruitment process. All candidates have the opportunity to request reasonable adjustments when applying. If you need any additional support at any stage, please contact us at: careers@mandg.com\n\nM&G is a leading international savings and investments business, managing money for around 4.6 million individual clients and more than 900 institutional clients in 38 offices worldwide. As at 31 December 2024, we had £345.9 billion of assets under management and administration.\n\nOur purpose is to give everyone real confidence to put their money to work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions. Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long-term investment and savings solutions.",{"devsecops":109,"ai awareness":109,"cloud security":109,"risk\u002Fissue tracking tools":110,"enterprise security products":109},2,3,[39,40,41,42,43],{"stakeholder engagement":113,"communication":113,"report writing":113,"analytical thinking":110,"problem solving":110,"teamwork":110},4,[44,45,46,47,48,49],{"rcsa":110,"red teaming":109,"gap analysis":110,"risk taxonomy":110,"cyber security":113,"risk mitigation":110,"assurance actions":110,"incident response":110,"control improvement":110,"penetration testing":109,"threat intelligence":110,"security architecture":110,"vulnerability scanning":109,"vulnerability management":110,"key risk indicators (kris)":110,"technology risk management":113,"risk and controls assessment":113},[50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66],{"detected_language_jobad":118,"required":119},"en",[120],[121],{"language":122,"level":123},"ENGLISH","C2",[125,126],"Information and Communications Technology Professionals","Business and Administration Professionals",[125,126],"https:\u002F\u002Fmgpru.wd3.myworkdayjobs.com\u002Fen-us\u002Fmandgprudential\u002Fjob\u002Fstirling\u002Fcyber-risk-analyst_r19075",1]