Business Protection

Search All Jobs

It’s our job to manage the increasing expectation of the regulators, industry bodies and financial services industry, particularly the FSA, Lending Standards Board, OFT, Information Commissioner, VISA and CIFAS.

Our high-quality, consistent, timely advice covers current and emerging risks, threats and regulatory issues that affect the Group, be it advising product owners on the regulatory or TCF (Treating Customers Fairly) impact of a new launch, analyzing fraud threats to protect our customers’ funds, or ensuring that customer data is kept secure.

Based mainly in our Swindon headquarters, we are made up of three departments.

Special Investigations are responsible for managing Financial Crime (most notably Fraud & Money Laundering) across the Society. Our key objectives include;

  • Be recognised as ‘Market Leading’ for fraud defenses and fraud losses
  • Provide cost effective management of financial crime operations
  • Proactively research and understand current and emerging threats
  • Mitigate threats to the Society through the Strategic Fraud Initiative (SFI) programme
  • Continue to promote a Group wide anti-fraud culture

The Compliance Department works across the business to ensure we sell and administer our products and services in-line with our regulatory requirements. Our activities are wide ranging and include:

  • providing advice and support in the design and build of new products and service
  • overseeing sales policies and processes and conducting risk-based reviews to ensure we are delivering the best possible service to our customers in the appropriate way
  • working with the Treasury team to ensure that business in controlled and governed effectively
  • approving financial promotions
  • maintaining the day to day relationship with the FSA; and reporting on key risks, issues and achievements to senior management

Information Security work to protect customer and employee personal data as well as Nationwide’s own valuable data (such as product information and future strategy).  Our activities are in line with the international standard for information security (ISO27001) and work to ensure the organisation complies with the requirements of our regulator and the Data Protection Act (DPA).  Our activities include:

  • Managing incidents which have been reported to us
  • Providing technical consultancy to our transformation teams to ensure that effectives controls are designed in
  • Reviewing the business and our third parties to ensure that compliance with our policies is maintained
  • Managing the system access process for the majority of our main applications
  • Providing detailed consultancy to the business specifically on the DPA
  • Risk reporting – to understand how the business is performing to our chosen risk appetite
  • Communicating with the business to raise their awareness of information security matters and best practice controls.

We provide structured development programmes for staff at all levels, and the breadth of roles on offer across the division mean that it is easy to plan and support your progression.  In an ever changing landscape, we work with over 16,000 of our colleagues to protect them and our 15 million members – if you embrace challenges then you’ll fit right in.