Tech Audit & Assurance Analyst

Job Description

Summary

As a Technology Audit and Assurance Analyst within the First Line of Defense for M&S Digital and Technology, you will support the delivery of Technology Audit and Assurance processes within the Risk, Audit, and Compliance function. You will play a key role in implementing the Digital and Technology Audit and Assurance strategy for M&S. Your responsibilities will include coordination and assurance of audit response plans for D&T Products and Platforms, and providing support in the tracking, monitoring, reporting, and assessment of the effectiveness of remedial actions.

Furthermore, this role involves executing second Line of Defense in-depth and thematic reviews on various issues, opportunities, or strategic changes, and may involve supporting stress testing exercises as needed to identify control and process gaps. Your contribution is crucial in ensuring that M&S's technology framework complies with regulatory requirements and adheres to best practice standards, thereby safeguarding the integrity and resilience of M&S's Technology systems.

To stay close to customers, our support teams are in the office three days a week as we believe that skills are developed through collaboration, and that spending time together makes us more creative and connected.

What's in it for you

Being a part of M&S is exactly that - playing your part to bring the magic of M&S to our customers every day. We're an inclusive, dynamic, exciting, and ever-evolving business built on doing the right thing and bringing exceptional quality, value, service to every customer, whenever, wherever and however they want to shop with us.

Here are some of the benefits we offer that make working for M&S just that little bit more special...

1. After completing your probationary period, you'll receive 20% colleague discount across all M&S products and many of our third-party brands for you and a member of your household.
2. Competitive holiday entitlement with the potential to buy extra holiday days!
3. Discretionary bonus schemes awarded based on how you achieve your personal objectives and our performance as a business.
4. A generous Defined Contribution Pension Scheme and Life Assurance.
5. A dedicated welcome to our teams with a tailored induction and a wide range of training programmes to develop your skills.
6. Amazing perks and discounts via our M&S Choices portal to maximise your financial and personal wellbeing.
7. Industry-leading parental, adoption and neonatal policies, providing support and flexibility for your family.
8. Access to a fantastic range of wellbeing support for all colleagues including access to our 24/7 Virtual GP and PAM Assist to support you and your family.
9. A charity volunteer day to support a charity or cause you're passionate about through a dedicated day away from work.

What you'll do

1. Deliver the Combined Assurance Plan with Internal Audit that aligns with the M&S objectives and regulatory demands.
2. Support delivery of complex audits and programs of audit activity and maintain integrity of records to support and satisfy audit trails.
3. Provide assurance oversight on the implementation of agreed-upon actions for Audit corrective actions and reporting on the effectiveness and efficiency status and resolution to senior management and relevant stakeholders.
4. Provides general and specific audit advice. Collaborates with professionals in related specialisms to develop and integrate findings.
5. Perform targeted 2nd Line reviews, focusing on specific themes, trends, or areas of concern that may arise from internal insights, Risk identification or external developments in the Retail Technology landscape and provide written reports detailing findings and recommendations.

Who you are

1. Experience of IT Governance Frameworks and the application of Technology Risk best practices and Risk Standards (ISO 31000, ITIL, Cobit 5, IS27001 COSO, NIST 800-53, SOX etc)
2. A track record as a control practitioner in managing digital/technology controls (experience in managing Cloud and Data technology controls is highly desirable)
3. Experience in Technology audit, Risk management, or IT compliance within a large and complex organisation, preferably in the retail sector or a related industry.
4. Proficiency in executing, and supporting Technology audits, including experience with audit software and tools, and the ability to provide assurance on the effectiveness of remediation efforts.
5. Basic understanding of technology development practices and ways of working (e.g. Waterfall, Agile, DevOps)

Everyone's welcome

We are ambitious about the future of retail. We're disrupting, innovating and leading the industry into a more conscientious, inspiring digital era. We're transforming how we work together and offering our most exciting opportunities yet. Marks & Spencer strives to be an inclusive organisation, trusted and admired by our colleagues, customers and suppliers. Join us and make change happen.

We are committed to building diverse and representative teams, where everyone can bring their whole selves to work and be at their best. We support each other and work together to win together.

If you feel you'd benefit from any support or reasonable adjustments during any stage of the recruitment process, please don't hesitate to let us know when completing your application. This information will be picked up by our team, so we can try and put steps in place to help you be at your best through this process.