Enterprise Data Risk Manager

At M&G, our purpose is to give everyone real confidence to put their money to work. With a heritage dating back more than 175 years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions.

Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long-term investment and savings solutions.

Through telling it like it is, owning it now and moving it forward together with care and integrity; we are creating an exceptional place to work for exceptional talent.

We will consider flexible working arrangements for any of our roles and offer workplace adjustments to ensure you have the support you need to succeed in your role.

Role Context

The Chief Data Office sets enterprise direction for how data is governed, managed and used across M&G. Business Areas and Corporate Functions remain accountable for their data and outcomes, while CITO owns the enterprise architecture, platforms and technical standards that enable delivery at scale.

The Enterprise Data Risk Manager ensures data risk is managed coherently and consistently across the Group, in line with Group risk standards defined by the second line of defence. The role coordinates data risk identification, assessment, reporting and remediation oversight, so data risks are aligned to enterprise risk appetite and regulatory expectations and supported by clear ownership, evidence and action.

This is a senior hands-on role within the Data Governance, Risk & Management function. It brings Data Owners, Data Stewards, business data leads, enterprise risk partners, compliance, internal audit, technology and governance colleagues together to create a coherent view of data risk and move the Group from fragmented risk visibility to consistent, evidenced risk management.

Key responsibilities

• Lead enterprise data risk identification and assessment by applying Group risk standards consistently to identify, assess, record and prioritise data risks across Business Areas and Corporate Functions.
• Lead alignment to enterprise risk appetite by working with risk partners and business owners to align data risks, controls, key risk indicators and tolerances to the Group Risk Management Framework, and developing metrics that give early sight of emerging issues and risk trends.
• Own enterprise data risk reporting and governance inputs by setting the structure, measures and narrative for risk and governance forums, showing current exposure, risk movement, overdue actions and areas requiring senior intervention.
• Oversee and challenge remediation by maintaining enterprise visibility of risk reduction plans, challenging the adequacy of assessments, remediation plans and evidence, and escalating material blockers or control gaps.
• Lead data control effectiveness assessment by assessing whether controls operate as intended and identifying where data controls need to be introduced, strengthened or evidenced more consistently.
• Lead regulatory and policy alignment for data risk by monitoring regulatory expectations, policy requirements and internal standards, ensuring these are reflected in risk assessments, remediation plans and reporting.
• Partner with data governance colleagues to connect policy adherence, ownership, stewardship, metadata, lineage and data quality findings into a coherent view of data risk exposure.
• Work with second line, compliance and internal audit to support risk reviews, audit activity, control assessments and evidence requests, ensuring findings are understood, owned and remediated effectively.
• Broker trade-offs and strengthen common approaches by bringing stakeholders together where risk reduction, delivery feasibility, capacity or evidence requirements conflict, and improving reporting and evidence practices so Group risk standards are easier to apply consistently.

Experience, skills and attributes

• Strong experience in risk management, data risk, data governance, operational risk, controls or a closely related discipline within financial services or another regulated environment.
• Strong understanding of risk management frameworks, including risk identification, assessment, appetite alignment, key risk indicators, control design, control effectiveness and remediation tracking.
• Good understanding of data management disciplines, including data ownership, data quality, metadata, lineage, critical data and policy adherence.
• Proven ability to lead enterprise risk processes and oversee remediation, assessing complex exposure, validating evidence and translating findings into clear recommendations and executive-ready reporting.
• Strong stakeholder management and influencing skills, with the confidence to provide constructive challenge and broker trade-offs between risk reduction, delivery feasibility, capacity and evidence requirements.
• Able to work effectively in a federated operating model, building trust with local owners while maintaining independence of view and appropriate challenge.
• Organised, hands-on and delivery-focused, with strong attention to detail and the ability to manage multiple priorities, governance cycles and reporting deadlines.
• Clear communicator, able to explain data risk clearly to both risk specialists and non-specialist audiences.

What we offer

We're dedicated to supporting your wellbeing and helping you thrive, both at work and beyond. Our benefits are designed to help you balance your professional and personal life, and financially plan for the future. Our UK benefits include:

• A valuable pension scheme of up to 18% (13% made up of employer contributions and 5% employee contributions).
• Access to our Share Save and Share Incentive Plan, alongside financial wellbeing and support services to help give you real confidence to put your money to work.
• Enjoy 38 days annual leave (including bank holidays), with the opportunity to purchase up to five extra days. Our Time Off When You Need It policy gives you the flexibility - to balance work and personal commitments.
• Our market-leading Inspiring Families policy includes comprehensive support and paid parental leave covering maternity, adoption, surrogacy, and paternity leave - because supporting families is an important part of our inclusive culture.
• Health & Protection cover includes Private Healthcare, Critical Illness cover and Life Assurance for you, with additional family options - for peace of mind.

To explore more about life at M&G and our full benefits offering, visit Life at M&G

At M&G we strive to have a diverse workforce and an inclusive culture, underpinned by our policies and employee-led networks that offer networking, support and development opportunities for the diverse communities our colleagues represent. We welcome applications from people of all backgrounds - across gender, ethnicity, age, disability, sexual orientation and more - including neurodivergent individuals, career returners and those with military service experience.

M&G is proud to be Level 3: Disability Confident Leader under the UK Government Disability Confident employer scheme, and we welcome applications from candidates with disabilities and long-term health conditions. If you would like to participate in the initiative, you will have the opportunity to indicate this on your application.

We are committed to providing an inclusive recruitment process. All candidates have the opportunity to request reasonable adjustments when applying. If you need any additional support at any stage, please contact us at: careers@mandg.com