Risk Manager Oversight - Security

Nationwide; Swindon; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading financial services company is seeking a Risk Manager Oversight to ensure effective management of Cyber and Physical Security risks. This role involves supporting and challenging the security strategy, providing oversight and assurance on security risk management, and coaching team members. The ideal candidate has a strong risk management background and relevant professional qualifications. The role offers the flexibility of hybrid working with a focus on teamwork and customer-centered practices.

Benefits

25 days holiday

Fully funded private medical insurance

Personal pension scheme

Annual performance-related bonus

Training opportunities

Life assurance

Health and wellness options

Paid volunteering days

Qualifications

• In-depth knowledge of Cyber and Physical Security.
• Strong risk management experience.
• Technical experience with Cyber Security controls.

Responsibilities

• Provide oversight and assurance on Cyber and Physical Security.
• Coach and support Security Risk Oversight team members.
• Represent the team in governance meetings.

Skills

Cyber and Physical Security

Risk Management

Technical Cyber Security controls

Communication Skills

Education

CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor

Job description

We\'re navigating significant change at Nationwide. It\'s an exciting time as we evolve to a new future that sees us accelerate delivery of our strategic aims, value to our Members and engage colleagues around new ways of working.

At the same time, we are investing in the Operational Risk Oversight team in the second line of defence. We are increasing the capacity, seniority, and capability of the team to ensure we are able to continue to add customer value by investigating, challenging, and influencing across the Society.

This exciting role will provide Cyber and Physical operational risk expertise to the Risk Community, aligning activity with strategic and operational objectives, and representing Risk effectively across the Society.

This role is within the 2nd Line of the 3 Lines of Defence model. The role is part of the Oversight for Chief Operations Office which includes Technology, Security, data and 3rd Party Management specialisms.

This role will be accountable for support, challenge, and influence over the security strategy through liaison with the Chief Security & Resilience Officer, Security Architects, Control Owners and Risk Partners. Security underpins all member and business services so understanding and managing security risk, control, and policy effectively is a critical part delivering services to customers.

At Nationwide we offer hybrid working wherever possible. More rewarding relationships are supported through our hybrid approach, bringing colleagues together across our UK wide estate, whilst also supporting generous access to home working. We value our time in the office to solve problems, to learn, and to feel connected.

For this job you\'ll spend at least two days per week, or if part time you\'ll spend 40% of your working time, based at either our Swindon or London office. If your application is successful, your hiring manager will provide further details on how this works. You can also find out more about our approach to hybrid working here.

If we receive a high volume of relevant applications, we may close the advert earlier than the advertised date, so please apply as soon as you can.

What you\'ll be doing

This role is focused on the risk oversight of Security within the Society covering Cyber and Physical Security. You will be providing oversight and assurance on the management of operational and delivery risk within the Security Strategy and the wider Security risk management activities delivered centrally and within projects and Function areas. This will be delivered through reviews, opinion papers and \"in the moment\" close and continuous support and challenge. This support and challenge component will also cover risk SME engagement and advice on key Security initiatives and proposals. Additionally, this role requires you to represent the team in governance meetings and maintain oversight of security incidents, risk assessments and the associated risk responses.

As a Risk Manager Oversight, you will also be coaching and supporting team members within the Security Risk Oversight team and wider Second Line colleagues too.

About you

• An in-depth knowledge and well-developed understanding of Cyber and Physical Security and familiarity with best practice frameworks e.g. NIST CSF, ISO 27001, CIS Controls
• Strong risk management experience and the differing approaches to assessing risk and controls
• Technical experience managing and/or delivering Cyber Security controls e.g. identity and access management, network security, offensive security testing
• Relevant professional qualifications - examples include, but are not limited to: CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor
• An ability to develop strong working relationships at all levels with excellent communication/influencing skills, written and verbal
• Ability to act decisively, objectively and maintain independence
• Ability to comprehend and assimilate complex information rapidly across a range of diverse business areas
• Able to work and lead under pressure with multiple pieces of work at the same time, with hard deadlines that must be met, together with strong prioritisation/planning skills
• A strong desire to produce work to the highest standards, where risk is expertly articulated, which will withstand scrutiny and challenge

Our customer first behaviours put customers and members at the heart of how we work together. They are the set of behaviours that every colleague needs to display, in every role:

• Feel what customers feel - We step into our customers\' shoes, using their feedback and insights to empathise with them and to understand their needs, so that every decision we make starts and finishes with our customers in mind
• Say it straight - We are brave in speaking out and saying what we think - we\'re honest and direct with good intent, openly sharing diverse perspectives to reach the best conclusions and using language everyone can understand
• Push for better - We don\'t settle for mediocrity, we challenge the status quo, taking responsibility for continuous improvement and personal development
• Get it done - We prioritise what will have the greatest impact, we are decisive, and we take accountability for delivering brilliant customer outcomes

You can strengthen your application by showing how our customer first behaviours resonate with you, and where you may have already demonstrated these.

The extras you\'ll get

There are all sorts of employee benefits available at Nationwide, including:

• 25 days holiday, pro rata
• From January 2026, all colleagues will have access to fully funded private medical insurance
• A personal pension - if you put in 7% of your salary, we\'ll top up by a further 16%
• Access to an annual performance related bonus
• Access to training to help you develop and progress your career
• A great selection of additional benefits through our salary sacrifice scheme
• Life assurance worth 8x your salary
• Wellhub - access to a range of free and paid options for health and wellness
• Up to 2 days of paid volunteering a year

Banking - but fairer, more rewarding, and for the good of society

We forge our own path at Nationwide.

As a mutual, we\'re owned by our members - those customers who bank, save or have a mortgage with us. We challenge the financial sector status quo. We don\'t see customers as the engine of our own profit. We share our profits with them and put their needs first. Always there when they need us. Supporting them and their lives.

If you\'re inspired by fairer finances, passionate about making a meaningful impact, and truly care about our customers, you\'re one of us.

At Nationwide, you are challenged to grow and rewarded for doing so. Valued. Recognised. Inspired to be your best. As a community we want our working lives to count. As a team, we celebrate what we achieve. As a standard-setter, we work for the good of customers, communities, and broader society.

We are Purpose-driven. Uncompromisingly Customer. Unstoppably Nationwide.

What to do next

If this role is for you, please click the \"Apply Now\" button. You\'ll need to attach your up-to-date CV and answer a few quick questions for us.

We respond to everyone, so we will be in contact shortly after the closing date to let you know the outcome of your application.

Life at Nationwide

Some of the things that matter most to us: Delivering fairer finances and having a positive impact on customers\' lives. Being truly inclusive. Rewarding high performance.

Read more

Roles and teams

Technology. Customer Engagement. Specialist. Early Career. Explore the types of jobs at Nationwide and find your perfect fit.

Read more

How to apply

You\'ll get it all at Nationwide. We\'re a workplace where you\'re rewarded, recognised, supported and celebrated. Find your next job with us.

Read more