Security Controls Lead

Working in Cyber Security is a big deal as we continue to play a key role in keeping Virgin Money safe. We’re on an exciting journey with a big vision as we grow our team to enhance our security and cyber operations. We’ll be working to protect against security threats to Virgin Money and the financial services sector. 

You’ll play an important role in helping us understand the security landscape so we can protect ourselves from risk.  This helps to inform our Cyber Strategy, Culture and Education work as well as direct investments to mitigate risks and prevent and detect attacks.

The Control Tower Team supports the organisation’s overall Cyber Security capabilities specifically focusing on enhancing our security posture against attacks to ensure we remain available to customer and colleagues.

We are happy to consider flexible working approaches to help you perform at your best.

This is a 6-month secondment opportunity.

At Nationwide we offer hybrid working wherever possible. More rewarding relationships are supported through our hybrid approach, bringing colleagues together across our UK wide estate, whilst also supporting generous access to home working. We value our time in the office to solve problems, to learn, and to feel connected.

For this role, you'll be based at your nearest regional office or hub. We value time spent together to connect with colleagues for collaboration so there will be a regular requirement to attend our London site approximately once per quarter. If you are based at an office location, you'll be expected to meet our hybrid working requirement of at least two days a week, or 40% of your working time if part-time, in the office. If your application is successful, your hiring manager will provide further details on how this works.

Nationwide is committed to the redeployment of our employees impacted by change, as such applications for redeployment candidates will be prioritised in this recruitment process.
 
If you’re a colleague on long-term absence (for example, on parental leave) or a temporary worker, please use your personal email address to submit an application.

What you’ll be doing

This role is responsible for owning the controls testing plan and driving the delivery of a continuous testing programme that supports the Strategic objectives of the Technology Operations Controls (TOCs) function. The focus is on ensuring controls remain effective and helping to protect the organisation by maintaining a strong risk and control environment.

You will lead the development of automation and continuous control monitoring capabilities, enabling a more data-driven approach to controls assessment and assurance. This includes identifying opportunities to enhance testing efficiency, improve visibility of control performance, and strengthen ongoing monitoring processes.

As an ambassador for good security practices, you will help track and oversee remediation plans, ensuring identified issues are addressed in a timely manner. You will also play a key role in raising awareness of cyber risks and control best practices across the organisation, helping to embed a strong security and controls mindset among employees at all levels.

The role requires close collaboration with Risk, Compliance, and Regulatory teams to ensure adherence to regulatory requirements, including technical control compliance. You will provide advice and support on risk management activities, responding to risk and audit requests, assessing regulatory obligations, and supporting third-party security control capability reviews.

Through strong stakeholder engagement and a proactive approach to controls assurance, you will help strengthen the organisation’s security posture, improve control effectiveness, and contribute to maintaining a safe and compliant operating environment.

About you

As a minimum requirement, you’ll have:

• Expert knowledge of cyber security governance frameworks, policies, and procedures such as NIST, COBIT, CIS (Center for Internet Security) Controls
• Understanding of cyber security risk management principles and practices
• Awareness of emerging cyber security trends, threats, and technologies
• Knowledge of security technologies, tools, and solutions used in cybersecurity programs
• Understanding of regulatory requirements and industry standards relevant to cyber security
• CISSP certified

Our customer first behaviours put customers and members at the heart of how we work together. They are the set of behaviours that every colleague needs to display, in every role:

• Feel what customers feel - We step into our customers’ shoes, using their feedback and insights to empathise with them and to understand their needs, so that every decision we make starts and finishes with our customers in mind

• Say it straight - We are brave in speaking out and saying what we think – we’re honest and direct with good intent, openly sharing diverse perspectives to reach the best conclusions and using language everyone can understand

• Push for better - We don’t settle for mediocrity, we challenge the status quo, taking responsibility for continuous improvement and personal development

• Get it done - We prioritise what will have the greatest impact, we are decisive, and we take accountability for delivering brilliant customer outcomes

You can strengthen your application by showing how our customer first behaviours resonate with you, and where you may have already demonstrated these.

The extras you’ll get

There are all sorts of employee benefits available at Nationwide, including:

• 30 days holiday, pro rata

• Private medical insurance

• A highly competitive pension to help you build a strong foundation for retirement

• Access to an annual performance-related bonus

• Training and development to help you progress your career

• A great selection of additional benefits through our salary sacrifice scheme

• Life assurance to provide peace of mind for you and your loved ones in the event of your death

• Wellhub – access to a range of free and paid options for health and wellness

• Up to 2 days of paid volunteering a year

Banking – but fairer, more rewarding, and for the good of society

We forge our own path at Nationwide.

As a mutual, we’re owned by our members - those customers who bank, save or have a mortgage with us. We challenge the financial sector status quo. We don’t see customers as the engine of our own profit. We share our profits with them and put their needs first. Always there when they need us. Supporting them and their lives.

If you’re inspired by fairer finances, passionate about making a meaningful impact, and truly care about our customers, you’re one of us.

At Nationwide, you are challenged to grow and rewarded for doing so. Valued. Recognised. Inspired to be your best. As a community, we want our working lives to count. As a team, we celebrate what we achieve. As a standard-setter, we work for the good of customers, communities, and broader society.

We are purpose-driven. Uncompromisingly customer. Unstoppably Nationwide.

What to do next

If this role is for you, please click the ‘Apply Now’ button. You’ll need to attach your up-to-date CV and answer a few quick questions for us. 

We respond to everyone, so we will be in contact shortly after the closing date to let you know the outcome of your application.

Keeping your data and personal information confidential is important to us. To find out more about how we use and process your data, please read our .

If you want to find out more about using AI in our recruitment process, please read more here.

Disability Confident 

We’re not just guided by data, we’re driven by the real experiences of our people. We’re a Disability Confident Level 3 Leader, the highest level. 

That’s why we’re constantly evolving our policies and practices to make sure everyone feels genuinely supported, valued, and empowered to champion inclusion. Whatever your needs, we’re here to support you. If you need any additional support throughout your application journey, email our team at Recruitment Support. 

Apply safely with Nationwide

Recruitment scams can look convincing, so take a moment to check the role is listed on our official careers site and read our guidance on Don’t be conned by a job scam.

The hiring manager for this role is Kish Aravinthan, and the main recruitment contact is Anoop Gosai.