Risk Manager Oversight (Security) - 12 month FTC

Nationwide - UK; Swindon; Hybrid; GBP 50,000 - 80,000; Full time

Job summary

A leading organization is seeking a Risk Manager specializing in Cyber and Physical Security oversight. This role involves engaging with security strategies and managing risks to protect customer interests while fostering an environment of hybrid working. Candidates should possess strong qualifications in Cyber Security and demonstrate effective communication skills. Join a team that prioritizes customer-centric approaches and continuous improvement.

Benefits

Personal pension contribution

Paid volunteering days

Life assurance worth 8x salary

Salary sacrifice benefits

Access to health and wellness options

Annual performance-related bonus

Professional development training

25 days holiday, pro rata

Qualifications

• Extensive understanding of Cyber and Physical Security risk management.
• Experience in delivering Cyber Security activities (e.g., Information Security Officer roles).
• Ability to build strong relationships with diverse stakeholders.

Responsibilities

• Oversee management of operational and delivery risk within the Security Strategy.
• Provide oversight and assurance through reviews and continuous support.
• Coach and support team members in Security Risk Oversight.

Skills

Communication

Risk Management

Cyber Security

Physical Security

Education

CISSP

CISM

CISA

CRISC

Job description

We’re navigating significant change at Nationwide. It’s an exciting time as we evolve to a new future that sees us accelerate delivery of our strategic aims, value to our Members and engage colleagues around new ways of working.

At the same time, we are investing in the Operational Risk Oversight team in the second line of defence. We are increasing the capacity, seniority, and capability of the team to ensure we are able to continue to add customer value by investigating, challenging, and influencing across the Society.

This exciting role will provide Cyber and Physical operational risk expertise to the Risk Community, aligning activity with strategic and operational objectives, and representing Risk effectively across the Society.

This role is within the 2nd line of the 3 lines of defence model. The role is part of the Oversight for Chief Operations Office which includes technology, security, data and 3rd party management specialisms.

This role will be accountable for support, challenge, and influence over the security strategy through liaison with the Chief Information Security Officer, Security Architects, and risk partners. Security underpins all business and member services so understanding and managing security risk, control, and policy effectively is a critical part delivering services to customers.

At Nationwide we offer hybrid working wherever possible. More rewarding relationships are supported through our hybrid approach, bringing colleagues together across our UK wide estate, whilst also supporting generous access to home working. We value our time in the office to solve problems, to learn, and to feel connected.

For this job you'll spend at least two days per week, or if part time you'll spend 40% of your working time, based at either our Swindon or London offices. If your application is successful, your hiring manager will provide further details on how this works. You can also find out more about our approach to hybrid working here

If we receive a high volume of relevant applications, we may close the advert earlier than the advertised date, so please apply as soon as you can.

What you’ll be doing

This role is focussed on the risk oversight of Security within the Society covering Cyber and Physical Security. You will be providing oversight and assurance on the management of operational and delivery risk within the Security Strategy and the wider Security risk management activities delivered centrally and within projects and function areas. This will be delivered through reviews, opinion papers and “In the moment” close and continuous support and challenge. This support and challenge component will also cover risk SME engagement and advice on key Security initiatives and proposals. Additionally, this role requires you to represent the team in governance meetings and maintain oversight of security incidents, risk assessments and the associated risk responses.

As a Risk Manager, you will also be coaching and supporting team members within the Security Risk Oversight team and wider Second Line colleagues too.

About you

• An in-depth knowledge and well-developed understanding of Cyber and Physical Security and risk management and the differing approaches to assessing effectiveness and maturity
• Experience of managing and/or delivering Cyber Security activities, e.g. Information Security Officer or Security Assurance roles, will be an advantage
• Relevant professional qualifications/ equivalent - examples include, but are not limited to: CISSP, CISM, CISA, CRISC, ISO 27001, PCI DSS, COBIT, NIST
• An ability to develop strong working relationships at all levels with excellent communication/influencing skills, written and verbal
• Ability to act decisively, objectively and maintain independence
• Ability to comprehend and assimilate complex information rapidly across a range of diverse business areas

Our customer first behaviours put customers and members at the heart of how we work together. They are the set of behaviours that every colleague needs to display, in every role:

• Feel what customers feel - We step into our customers’ shoes, using their feedback and insights to empathise with them and to understand their needs, so that every decision we make starts and finishes with our customers in mind
• Say it straight - We are brave in speaking out and saying what we think – we’re honest and direct with good intent, openly sharing diverse perspectives to reach the best conclusions and using language everyone can understand
• Push for better - We don’t settle for mediocrity, we challenge the status quo, taking responsibility for continuous improvement and personal development
• Get it done - We prioritise what will have the greatest impact, we are decisive, and we take accountability for delivering brilliant customer outcomes

You can strengthen your application by showing how our customer first behaviours resonate with you, and where you may have already demonstrated these.

The extras you’ll get

There are all sorts of employee benefits available at Nationwide, including:

• A personal pension – if you put in 7% of your salary, we’ll top up by a further 16%
• Up to 2 days of paid volunteering a year
• Life assurance worth 8x your salary
• A great selection of additional benefits through our salary sacrifice scheme
• Wellhub – Access to a range of free and paid options for health and wellness
• Access to an annual performance related bonus
• Access to training to help you develop and progress your career
• 25 days holiday, pro rata

Banking – but fairer, more rewarding, and for the good of society

We forge our own path at Nationwide.

As a mutual, we’re owned by our members - those customers who bank, save or have a mortgage with us. We challenge the financial sector status quo. We don’t see customers as the engine of our own profit. We share our profits with them and put their needs first. Always there when they need us. Supporting them and their lives.

If you’re inspired by fairer finances, passionate about making a meaningful impact, and truly care about our customers, you’re one of us.

At Nationwide, you are challenged to grow and rewarded for doing so. Valued. Recognised. Inspired to be your best. As a community we want our working lives to count. As a team, we celebrate what we achieve. As a standard-setter, we work for the good of customers, communities, and broader society.

We are Purpose-driven. Uncompromisingly Customer. Unstoppably Nationwide.

What to do next

If this role is for you, please click the ‘Apply Now’ button. You’ll need to attach your up-to-date CV and answer a few quick questions for us.

We respond to everyone, so we will be in contact shortly after the closing date to let you know the outcome of your application.

#LI-POST