Operational Risk Oversight Manager – Technology, Cyber and Data

We are seeking an Operational Risk Oversight Manager – Technology, Cyber, and Data to join our Second Line of Defence. The team provides oversight of these critical risk areas to ensure our digital services are resilient, our defences are robust, and our members’ data remains secure. Your work will directly support the delivery of safe, secure, and resilient operations for Nationwide and its members.

As part of our independent Second Line Operational Risk Oversight team, you will play a pivotal role in safeguarding the Society’s systems, information, and processes. The team’s mission is to ensure that non-financial risks are effectively managed, enabling Nationwide to serve its members safely and efficiently.

In this role, you will focus on Technology, Cyber, and Data risk oversight. You will work closely with first-line technology teams, cybersecurity specialists, and data governance leads. By assessing and constructively challenging how risks are identified and managed, you will provide valuable insight and assurance that our operations remain resilient and compliant within a rapidly evolving digital landscape.

You will collaborate with colleagues across the Chief Operating Office (COO) function and beyond, ensuring that key controls for IT resilience, cyber security, and data management are effective, robust, and future-proof. You will help identify potential technology- and data-related risks early, influence improvements, and ensure that robust mitigation plans are in place to address major threats.

Your insights will shape the Society’s view of its risk landscape, informing decision‑making that upholds our responsibilities to members and regulators while enabling safe and responsible technological innovation.

We are happy to consider flexible working approaches to help you perform at your best.

At Nationwide we offer hybrid working wherever possible. More rewarding relationships are supported through our hybrid approach, bringing colleagues together across our UK wide estate, whilst also supporting generous access to home working. We value our time in the office to solve problems, to learn, and to feel connected.

For this job you’ll spend at least two days per week, or if part time you’ll spend 40% of your working time, based at either our London, Swindon or Glasgow office.
If you’re based at our Glasgow office, this will apply from 1 April 2027 and ahead of that there will be a need to regularly connect with colleagues for collaboration events. If your application is successful, your hiring manager will provide further details on how this works. You can also find out more about our approach to hybrid working here.

If we receive a high volume of relevant applications, we may close the advert earlier than the advertised date, so please apply as soon as you can.

You will provide independent operational risk oversight of Nationwide’s technology, cyber security, and data governance activities, ensuring that our digital services remain resilient and our members’ data is protected.

On a day-to-day basis, you will work closely with first-line teams to evaluate risk assessments, test critical controls, and provide expert guidance to ensure risks are effectively identified and mitigated. You will also contribute to the ongoing development of Nationwide’s Enterprise Risk Management Framework, supporting the evolution of policies, controls, and risk appetite, and assessing both compliance and operational effectiveness.

Using a range of oversight techniques—from in-depth reviews of critical systems, processes, and controls to continuous monitoring of emerging threats—you will deliver valuable insights and assurance to senior management.

Through these efforts, you will directly support the Director of Operational Risk by strengthening Nationwide’s resilience and helping to safeguard our members and operations in an increasingly digital environment.

You will have:

• Proven experience in technology risk, cyber security, or data governance, with a strong technical foundation in at least one of these areas and the ability to develop expertise across all three
• Demonstrated track record…