Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 1K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

Add office photos

Employer? Claim Account for FREE

M&C Saatchi Performance

Compare

3.5

based on 17 Reviews

42 M&C Saatchi Performance Jobs

Deputy Manager Enterprise Security (Supply Chain)

M&G plc

3.5

based on 17 Reviews

2-5 years

Mumbai

1 vacancy

Deputy Manager Enterprise Security (Supply Chain)

M&C Saatchi Performance

posted 5mon ago

Job Role Insights

Flexible timing

Key skills for the job

Customer Service Supply Chain Management Project Management Risk Management Information Security Software Asset Management

+ 3 more

Job Description

Primary Key Responsibilities (Top 3-5 KRA)

For technical specialists, accountable for delivering expert advice or service, using specialist knowledge and subject matter expertise.
Systematic assessment of Supply Chain Security Risk in the business and development of appropriate strategies to manage this risk.
Ensuring that existing Enterprise Security Policy, Standards Process and Guidelines are consistently embedded and communicated across the business units, ensuring appropriate alignment with business need and providing effective and proactive mitigation of related risks to M&G.
Provision of specialist consultancy and advice on Supply Chain Security management to managers, project teams and infrastructure delivery teams (including provision of guidance on conformance with the legal aspects of information processing, e. g. GDPR, Computer Misuse Act etc).
Ensuring supply Chain Security requirements are embedded within all new architecture and infrastructure, working with Security Architecture, Project Management, Development teams and third parties to ensure the implementation of the required level of security functionality into all new products and services.

Additional Responsibilities :

Evaluation of Enterprise Security & Privacy tools, products and solutions, and contributing to the decision process for their purchase and use.
To support development, definition and operation of controls to manage information security risks.
Development of new ideas to contribute to the continued success of the department and the services provided.
Providing specialist advice and guidance to managers, project teams, infrastructure delivery team and Enterprise Security & Privacy peers.
To work with internal and external teams to ensure that appropriate levels of security functionality are in place.
To identify, analyse and mitigate the risks inherent in working with other organizations as part of a Supply Chain Security.
Ensure Enterprise Security & Privacy internal and external audits are effectively communicated and subsequent remedial activities are followed through to agreed actions
Assist in management of security incidents relating to Supply Chain.
Moderate the annual review and update of information security related policies and processes.
Stay up-to-date on information technology trends and security standards.
Conduct trainings to educate and develop security awareness in the workforce on information security
Provide guidance on associated regulations & legislations.
Research & assess information security vulnerabilities.
Acting as an ambassador for Enterprise Security Management.
Compliance - To ensure that you understand and adhere to M&G s Code of Conduct and, where appropriate, comply with all relevant regulatory policies. This includes completion of any mandatory training requirements.
To demonstrate a positive risk, compliance and control culture through the identification, assessment, monitoring and management of risks and issues within the business area, alongside ensuring timely and appropriate resolution of control weaknesses, actions and failures that arise.

Knowledge, Skills, Experience & Educational Qualification

Knowledge:

Qualifications such as CISSP, CISA, CISM Lead Auditor of equivalents would be advantageous
Working knowledge of financial services regulatory and legislative frameworks.
Working knowledge of Information Security regulations and legislation.
It is desirable to have working knowledge of industry best practice and external bodies in the same field.
It is desirable to have working knowledge of information security management and governance standards.
It is desirable to have working knowledge of third party relationships and the associated information security risks.
Knowledge of security investigation techniques, the rules of evidence and practical experience of computer forensics would be useful.
A thorough knowledge and understanding of information risk related legislation e. g. the GDPR, and Computer Misuse Act etc.
Knowledge on appropriate information security management and governance standards, e. g. ISO 27001, CoBIT, ISF Code of Practice. and/or financial services regulations relating to IT (e. g. AAF, FSA).
Broad knowledge of business conducted within M&G, including M&G Global Services India.

Skills:

Excellent analytical and multi-tasking skills.
Able to look at and understand processes and infrastructure.
Good understanding in information security methodologies, frameworks and tools
Have the ability to drive initiatives through cross functional teams and drive alignment with key stakeholder
Good understanding of supply chain management, risk management principles and application of mitigating measures to reduce risks
Ability to build relationships at all levels in the business.
Ability to present reports in meetings.
Ability to understand organisational culture and use this knowledge to gain commitment and get work done.
Ability to provide support to and accept direction from colleagues in other areas.
Remain effective in situations when responsibilities, tasks, priorities and / or work environment change significantly.
Ability to assess multiple options (including consequences) in parallel, while working on possible solutions.
Ability to work with limited supervision, seeking guidance where appropriate.
Confident communicator, able to get the message across clearly and concisely via appropriate channels, whether verbal or written.

Experience:

6+ years experience of working or studying in at least one of the following areas: IT / information security / risk management / audit / assurance / supplier management.
Experienced in working with UK stakeholders.
Experience and understanding of the information risk implications of Supply Chain relationships and the management strategies required

Educational Qualification:

Graduate in any discipline.

We have a diverse workforce and an inclusive culture at M&G Global Services, regardless of gender, ethnicity, age, sexual orientation, nationality, disability or long term condition, we are looking to attract, promote and retain exceptional people. We also welcome those who take part in military service and those returning from career breaks.

Employment Type: Full Time, Permanent

Read full job description