Security & Resilience Consultant

Nationwide is the world’s largest building society, and it is an exciting time to join us. We are looking for a Security and Resilience Consultant to join our Security Consultancy team within the Security & Resilience function.

Our mission is to work with colleagues to make sure services, money and data are always available and secure. In this role, you will help business and change teams deliver secure, resilient and compliant services across a range of technology changes and transformation programmes.

We are happy to consider flexible working approaches to help you perform at your best.

This is a 6-month secondment opportunity.

At Nationwide we offer hybrid working wherever possible. More rewarding relationships are supported through our hybrid approach, bringing colleagues together across our UK wide estate, whilst also supporting generous access to home working. We value our time in the office to solve problems, to learn, and to feel connected.

For this role, you'll be based at your nearest regional office or hub. We value time spent together to connect with colleagues for collaboration so there will be a regular requirement to attend our Swindon Or London site approximately (once per quarter). If you are based at an office location, you'll be expected to meet our hybrid working requirement of at least two days a week, or 40% of your working time if part-time, in the office. If your application is successful, your hiring manager will provide further details on how this works.

Nationwide is committed to the redeployment of our employees impacted by change, as such applications for redeployment candidates will be prioritised in this recruitment process.

If you’re a colleague on long-term absence (for example, on parental leave) or a temporary worker, please use your personal email address to submit an application.

What you’ll be doing

As a Security and Resilience Consultant, you will be accountable for ensuring that services and change initiatives in your aligned business areas are delivered in a secure, resilient and compliant way.

You will work closely with business, change and delivery teams, supporting everything from small technology changes to major transformation programmes. You will help implement Security & Resilience strategies and policies in a positive, pragmatic way that enables colleagues to achieve their business objectives.

In this role, you will assess the impact of change initiatives and issue appropriate security and resilience requirements to support compliance with our policies and standards. You will conduct risk assessments, recommend suitable controls to keep services and systems within enterprise risk appetite, and advise on how security and resilience control requirements should be implemented so designs achieve the right outcome and remain operationally viable. You will also support change initiatives in navigating central security and resilience services, including monitoring, penetration testing and access management, and assure that control requirements are met throughout the project lifecycle, working with the Security Requirement Assurance team where needed. As the initial point of contact for security and resilience questions, challenges and escalations across your aligned business areas, you will help teams resolve issues pragmatically and effectively.

You will build strong relationships across multiple areas, working collaboratively and proactively to ensure Security & Resilience is embedded effectively in projects and programmes.

About you

As a Security and Resilience Consultant, you will bring strong knowledge of IT security, information security, operational resilience, data privacy, risk and controls. As a minimum, you will have:

• Experience in a security consultancy role or a related discipline, such as security governance, risk and control, or security operations.

• A relevant professional qualification, or be working towards certification, such CISSP.

• A developed understanding of risk and control methodologies, including practical experience of risk assessment.

• Knowledge of relevant industry standards, frameworks and good practice, such as ISO, NIST, COBIT or COSO.

• Strong judgement, decision-making and creative problem-solving skills.

• The ability to understand and assess the security and resilience elements of technical designs and constructively challenge to deliver better business and security and resilience outcomes.

• The ability to communicate complex risks and issues to technical and non-technical stakeholders to influence critical business decisions.

Our customer first behaviours put customers and members at the heart of how we work together. They are the set of behaviours that every colleague needs to display, in every role:

• Feel what customers feel - We step into our customers’ shoes, using their feedback and insights to empathise with them and to understand their needs, so that every decision we make starts and finishes with our customers in mind

• Say it straight - We are brave in speaking out and saying what we think – we’re honest and direct with good intent, openly sharing diverse perspectives to reach the best conclusions and using language everyone can understand

• Push for better - We don’t settle for mediocrity, we challenge the status quo, taking responsibility for continuous improvement and personal development

• Get it done - We prioritise what will have the greatest impact, we are decisive, and we take accountability for delivering brilliant customer outcomes

You can strengthen your application by showing how our customer first behaviours resonate with you, and where you may have already demonstrated these.

The extras you’ll get

There are all sorts of employee benefits available at Nationwide, including:

• 25 days holiday, pro rata

• Access to private medical insurance

• A highly competitive pension to help you build a strong foundation for retirement

• Access to an annual performance-related bonus

• Training and development to help you progress your career

• A great selection of additional benefits through our salary sacrifice scheme

• Life assurance to provide peace of mind for you and your loved ones in the event of your death

• Wellhub – access to a range of free and paid options for health and wellness

• Up to 2 days of paid volunteering a year

Banking – but fairer, more rewarding, and for the good of society

We forge our own path at Nationwide.

As a mutual, we’re owned by our members - those customers who bank, save or have a mortgage with us. We challenge the financial sector status quo. We don’t see customers as the engine of our own profit. We share our profits with them and put their needs first. Always there when they need us. Supporting them and their lives.

If you’re inspired by fairer finances, passionate about making a meaningful impact, and truly care about our customers, you’re one of us.

At Nationwide, you are challenged to grow and rewarded for doing so. Valued. Recognised. Inspired to be your best. As a community, we want our working lives to count. As a team, we celebrate what we achieve. As a standard-setter, we work for the good of customers, communities, and broader society.

We are purpose-driven. Uncompromisingly customer. Unstoppably Nationwide.

What to do next

If this role is for you, please click the ‘Apply Now’ button. You’ll need to attach your up-to-date CV and answer a few quick questions for us.

We respond to everyone, so we will be in contact shortly after the closing date to let you know the outcome of your application.

The hiring manager for this role is Zahra Zohoor, and the main recruitment contact is Nathan Richens.