Data Protection Oversight Lead - Second Line

Nationwide; Swindon; Hybrid; GBP 65,000 - 100,000; Full time

Benefits offered by this job

Private medical insurance

Highly competitive pension

Annual bonus potential

Training and development support

Volunteer days

Job summary

Nationwide is seeking a Data Protection Manager to join our second-line Data Protection Oversight team. You’ll provide independent oversight of data protection risks and complex processing activities, applying UK GDPR and regulatory expectations to form evidence-based opinions.

You’ll collaborate with stakeholders across Nationwide to ensure risk management is understood and escalated appropriately, supporting trust with members and regulators while upholding our mutual values.

Qualifications

• Deep knowledge of UK GDPR, Data Protection Act 2018, PECR and regulatory expectations.
• Broad practical Data Protection experience beyond single processes.
• Experience providing independent oversight, assurance or compliance monitoring.
• Ability to engage senior stakeholders and provide evidence-based opinions.
• Experience in regulated environments such as financial services.

Responsibilities

• Provide independent oversight and challenge across a broad range of Data Protection risks and processing activities.
• Review high-risk impact assessments and assess residual risk with actionable conclusions.
• Produce concise reports for senior leaders and governance committees.
• Monitor regulatory developments and incidents to identify emerging themes requiring oversight.
• Contribute to Nationwide's Data Protection oversight framework and incident oversight activities.

Skills

UK GDPR knowledge

Data protection expertise

Independent oversight

Stakeholder engagement

Regulatory expectations

Education

Data Protection qualification (CIPP/E, CIPM) or equivalent

Job description

Nationwide is seeking a Data Protection Manager to join our second-line Data Protection Oversight team. You’ll provide independent oversight of data protection risks and complex processing activities, applying UK GDPR and regulatory expectations to form evidence-based opinions.

You’ll collaborate with stakeholders across Nationwide to ensure risk management is understood and escalated appropriately, supporting trust with members and regulators while upholding our mutual values.