Senior Risk Manager - Deputy Data Protection Officer

We’re navigating significant change at Nationwide. It’s an exciting time as we evolve to a new future that sees us accelerate delivery of our strategic aims, value to our Members and engage colleagues around new ways of working.

At the same time, we are investing in the Operational Risk Oversight team in the second line of defence.  We are increasing the capacity, seniority, and capability of the team to ensure we are able to continue to add customer value by investigating, challenging, and influencing across the Society.

Nationwide collects, stores, and processes customer data to provide effective services and is committed to protecting personal data under its control. The rapid growth of digitisation and demand for enhanced customer experience leads to greater volumes of data to control, and more complex challenges in ensuring that data is used ethically and appropriately, including in relation to emerging developments in AI. This requires an evolving set of skills both to operate and maintain systems and ensure a rigorous focus on customer outcomes and vulnerability. A strong Data Protection framework and controls are required to ensure compliance with Data Protection requirements.

As Nationwide's Deputy Data Protection Officer, they will support the DPO in providing strategic leadership of our Data Protection oversight agenda.  They will work closely with the Business to ensure processing activities are known and assessed for risk and compliance.  The team provides the framework and Oversight for the first line to ensure compliance with existing and future Data Protection law. The Deputy Data Protection Officer is instrumental in designing and implementing this across Nationwide. 

At Nationwide we offer hybrid working wherever possible. More rewarding relationships are supported through our hybrid approach, bringing colleagues together across our UK wide estate, whilst also supporting generous access to home working. We value our time in the office to solve problems, to learn, and to feel connected.

For this job you'll spend at least two days per week, or if part time you'll spend 40% of your working time, at one of our offices. If your application is successful, your hiring manager will provide further details on how this works. You can also find out more about our approach to hybrid working here.

You will be expected to work from London or Swindon twice per week. 

If we receive a high volume of relevant applications, we may close the advert earlier than the advertised date, so please apply as soon as you can.

What you’ll be doing

As part of this role, you will be responsible for:

• Supporting the Society wide approach to compliance with the Data Protection Act and other Data regulation/legislation such as PECR through effective framework implementation and Oversight. A Society wide RACI is in operation that dictates which department is directly accountable for completing required compliance activities. 
• Supporting the DPO to provide assurance to executive management and the Board Risk Committee on the status of Data Protection Compliance, and the adequacy and effectiveness of risk management to mitigate key operational, legal, regulatory and conduct risks.
• Employing various approaches for Data Protection Oversight which include “Close and Continuous” oversight, and undertaking risk and control based “formal oversight reviews”. This will include areas such as DPIAs, Policies, Cookies, and Data incidents.
• Maintaining high value relationships at Director / Head of level with a sufficient depth of understanding of their business area deliverables, priorities and risks. You will ensure that the key Data Protection priorities and risks are sufficiently prominent and accounted for. Providing effective insight and presenting at risk and control governance forums/committee
• Working collaboratively with partners across the 3LOD to simplify and strengthen Data Protection risk management practices for the benefit of the Business and Society overall
• Deputising for the Data Protection Officer as required

About you

• We’ll need you to have a very strong and detailed understanding of all applicable Data Protection laws, regulations, and principles.
• You should have substantial Data Protection law experience at an expert level with an emphasis on UK and EU requirements and the implementation of those requirements.
• You will have a demonstrable track record of applying and oversighting these within a Retail Banking/Financial Services firm and be known as a Data Protection expert. You should be able to demonstrate your subject matter expertise on UK and EU GDPR, including as it applies to banking services.
• You should be able to use your knowledge to ensure Nationwide, via its policies and procedures, fulfils its obligations to data subjects and comply with Data Protection laws.
• You will have the ability to comprehend and assimilate Data Protection information rapidly, break down complex problems and provide support and challenge to Data owners, users, and processors in a clear and understandable way.
• Interpersonally, you will have experience of working on a regular basis with Director and Heads of Business areas and you can develop high value relationships at all levels.

Our Customer First behaviours are all about putting customers and members at the heart of how we work together. You can strengthen your application by showing the behaviours that resonate with you, and how you might have already demonstrated these.

• Say it straight - This is about being honest and direct with good intent and saying what needs to be said in the room. It’s also about being clear, precise, and using language that we and, importantly, our customers and members can understand.
• Push for better - This is about aiming high and constantly looking for better in how we work together and serve our customers and members.
• Get it done - This is about prioritising what will have the greatest impact, being decisive and taking accountability for delivering on the end-to-end outcome.

We know applying for jobs can sometimes feel like you’re sending an application into a black hole. We review each application individually. So, it’s a good idea to call out your most relevant experience on your application to give yourself the best chance.

The extras you’ll get

There are all sorts of employee benefits available at Nationwide, including:

• A personal pension – if you put in 7% of your salary, we’ll top up by a further 16%
• Up to 2 days of paid volunteering a year
• Life assurance worth 8x your salary
• A great selection of additional benefits through our salary sacrifice scheme
• Gympass – Access to a range of free and paid options for health and wellness.
• Access to an annual performance related bonus
• Access to training to help you develop and progress your career
• 30 days holiday, pro rata
• Status car allowance
• Individual healthcare cover

What makes us different

Nationwide is the world’s largest building society. With over 15 million customers, we have a relationship with almost a quarter of the UK’s population. We’ve got the scale to compete with the big banks, but we’re not a bank.  

As a building society, we’re owned by our members – that’s our customers who have their current account, mortgage or savings with us. It means we can do things differently to deliver our Purpose – Banking – but fairer, more rewarding, and for the good of society.  

When you work at Nationwide, you can experience that difference for yourself. You’ll be part of a high-performing, purpose-driven organisation that offers rewarding career experiences and a highly competitive range of benefits to match. You’ll also be joining us at an important time as we seek to reach more and more people in the UK. We want everyone in the UK to know that they don’t have to bank with a bank. They can choose a modern mutual instead.  

What to do next

If this role is for you, please click the ‘Apply Now’ button. You’ll need to attach your up-to-date CV and answer a few quick questions for us.

We respond to everyone, so we will be in contact shortly after the closing date to let you know the outcome of your application.

LI-POST