Controls Testing Manager Chief Controls Office - Security and Technology

at  Nationwide

As a Manager in the Controls Testing Team you will lead a team of control testers to assess the design and operational effectiveness of controls across the Society, focussed on Technology and Security, to ensure the controls mitigate the risks faced by the Society to the set risk tolerance threshold.
You will be responsible for creating and delivering testing plans to the highest standards and in accordance with our defined methodology, as well as working with the business to ensure control framework uplifts and enhancements deliver sustainable and proportionate risk mitigation.
To support this, our Control Testing Team is currently looking for an ambitious, energetic and Control Testing Manager with a strong background in Technology and Information & Cyber Security.
As part of the Chief Controls Office, the Controls Testing Team is critical to ensuring the design and operational effectiveness of controls through regular assessment, ensuring they are robust enough to safely and reliably deliver the services our members expect.
At Nationwide we offer hybrid working wherever possible. More rewarding relationships are supported through our hybrid approach, bringing colleagues together across our UK wide estate, whilst also supporting generous access to home working. We value our time in the office to solve problems, to learn, and to feel connected.
For this job you’ll spend at least two days per week, or if part time you’ll spend 40% of your working time, based at either our Swindon, London, Bournemouth, Dunfermline, Sheffield or Northampton office. If your application is successful, your hiring manager will provide further details on how this works. You can also find out more about our approach to hybrid working here.
If we receive a high volume of relevant applications, we may close the advert earlier than the advertised date, so please apply as soon as you can.

ABOUT YOU

The following minimum requirements apply as guidance:

• Certified in or be on your way to completing any of CISA, CISM, CISSP and/or relevant Cloud, Cyber certifications.
• A good working knowledge of NIST, COBIT, ITIL as well as Cloud and Cyber risk control frameworks.
• Experience of applied testing of information security management controls across large technology environments, including for example MS Windows and Windows Server, UNIX, LINUX, Mainframes (UNISYS and Fujitsu), AWS, AZURE, as well as database management systems and networks etc.
• Audit, Controls, Risk or Compliance background with supervisory experience and/or experience of working with/for external auditors on annual financial statement controls testing.
• Excellent stakeholder management skills and communication skills (written and verbal).
• Ability to relate to and influence employees at all levels.

Our Customer First behaviours are all about putting customers and members at the heart of how we work together. You can strengthen your application by showing the behaviours that resonate with you, and how you might have already demonstrated these.

• Say it straight - This is about being honest and direct with good intent and saying what needs to be said in the room. It’s also about being clear, precise, and using language that we and, importantly, our customers and members can understand.
• Push for better - This is about aiming high and constantly looking for better in how we work together and serve our customers and members.
• Get it done - This is about prioritising what will have the greatest impact, being decisive and taking accountability for delivering on the end-to-end outcome.

We know applying for jobs can sometimes feel like you’re sending an application into a black hole. We review each application individually. So, it’s a good idea to call out your most relevant experience on your application to give yourself the best chance.

You will be working as a Manager within the Controls Testing Team (CTT), leading a group of controls testers to:

• Proactively contribute to planning and be accountable for the timely delivery of a control testing plan for the first line of defence
• Lead a team to test controls against standards that drive continuous improvement in risk and control management practices and contribute to consistency
• Report on the design adequacy and operational effectiveness of controls in line with our established control testing methodology and approach
• Work with the business to explain the results of your testing, and suggest ways through which control gaps can be remediated to strengthen the control environment building a partnership with key stakeholders
• Explore and implement new technologies / approaches to derive and deliver control testing efficiencies
• Provide constructive challenge and advice to ensure the right outcomes for our members
• Work as an integral member of CTT leading on internal initiatives to drive a continuous improvement approach in all we do