Cyber Policy Lead

Reference: izwx0vtfrbisrb55idvz

We are seeking an experienced Cyber Policy Lead to shape, develop and maintain a clear, proportionate policy framework that supports secure and effective working across a complex organisation. This is a strategic role requiring strong knowledge of cyber security, governance, risk management and regulatory expectations, alongside the ability to translate technical and legislative requirements into practical guidance.

You will lead the development and review of cyber security policies, standards and supporting procedures, ensuring they remain aligned with current threats, recognised frameworks and applicable legal obligations. Working closely with technology, risk, legal, compliance, audit and operational teams, you will identify policy gaps, assess their impact and agree appropriate improvements. You will also provide authoritative advice on policy interpretation, exceptions and risk acceptance.

The role will involve monitoring changes in legislation, regulation and industry practice, assessing their implications and ensuring that relevant requirements are reflected in internal controls and guidance. You will support assurance activity, contribute to governance forums and prepare clear reports, briefings and recommendations for senior stakeholders. You may also lead awareness initiatives, policy communications and engagement activity to promote secure behaviours and consistent adoption.

We are looking for someone with substantial experience in cyber security policy, governance, risk or compliance, ideally within a large, regulated or public-facing environment. You should have a strong understanding of information security principles, risk-based control frameworks and relevant standards such as ISO 27001, NIST or equivalent. Experience of policy lifecycle management, regulatory change and working with senior decision-makers is essential.

Excellent written and verbal communication skills are required, together with the confidence to influence stakeholders at all levels. You will be organised, analytical and pragmatic, able to manage competing priorities while maintaining attention to detail. Relevant professional qualifications in cyber security, information assurance, risk or governance would be advantageous, as would experience of delivering security awareness or transformation programmes.

£53,800.00 - £75,000.00
Per annum
Added 02/11/2026
Reference: izwx0vtfrbisrb55idvz

Other similar jobs

Cyber Policy Lead

Added 02/11/2026

We are seeking an experienced Cyber Policy Lead to shape and strengthen cyber security policy across a complex, highly regulated environment. This is an influential role for a policy professional who can translate emerging cyber risks, legal requirements and industry standards into clear, practical guidance that supports secure and effective business operations. You will lead the development, review and maintenance of the cyber security policy framework, ensuring that policies remain proportionate, current and aligned with recognised standards and regulatory expectations. You will assess the impact of emerging threats, technologies and legislation, provide authoritative advice to senior stakeholders, and ensure that...

Learn more

Cyber Policy Lead

Added 02/11/2026

We are seeking an experienced Cyber Policy Lead to shape and develop cyber security policy across a complex organisation. This is an influential role for someone who can translate emerging cyber risks, regulatory expectations and technical developments into clear, practical and proportionate policy. You will work with senior stakeholders, security specialists, risk teams and business leaders to strengthen cyber resilience and support informed decision-making. You will lead the end-to-end policy lifecycle, including researching requirements, drafting and reviewing policies, coordinating consultation, securing approval and monitoring implementation. You will maintain a coherent suite of cyber security policies, standards and supporting guidance, ensuring...

Learn more

Lead Technology, Res​ilience​​ and Cyber Associate

Added 22/10/2026

We are seeking a Lead Technology, Resilience and Cyber Associate to support the development and delivery of robust technology, operational resilience and cyber security capabilities. This is a broad role for an experienced professional who can provide practical guidance, challenge existing practices and help strengthen the organisation’s ability to prevent, withstand and recover from disruption. You will lead assessments of technology and cyber risks, identify vulnerabilities and recommend proportionate improvements. Working with colleagues across technology, risk, compliance and business teams, you will help maintain effective frameworks, policies, controls and reporting. You will also contribute to the development and testing of...

Learn more

Lead Technology, Resilience and Cyber Associate

Added 22/10/2026

An exciting opportunity has arisen for a Lead Technology, Resilience and Cyber Associate to support the development and delivery of technology resilience and cyber security initiatives across a complex organisation. This role will help strengthen the organisation’s ability to prevent, withstand, respond to and recover from technology-related disruption and cyber threats. Working with stakeholders across technology, risk, compliance, operations and business teams, you will provide informed advice on resilience and cyber risk, helping to identify vulnerabilities and define practical improvements. You will contribute to the development and maintenance of technology resilience frameworks, policies, standards and procedures, ensuring they remain aligned...

Learn more

Lead Technology, Resilience and Cyber Associate

Added 22/10/2026

An exciting opportunity has arisen for a Lead Technology, Resilience and Cyber Associate to support the development and delivery of robust technology, operational resilience and cyber security capabilities. This role will provide expert advice, challenge and practical support across a range of technology and business initiatives, helping to ensure that risks are identified, managed and reduced effectively. You will lead assessments of technology and cyber risks, review the effectiveness of controls, and contribute to the design of proportionate mitigation plans. Responsibilities will include supporting resilience and continuity planning, coordinating scenario testing, assessing critical services and third parties, and helping to...

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of information and cyber security risks across an organisation’s supplier and partner ecosystem. This is a key role within the wider risk function, responsible for ensuring that third parties are assessed, monitored and managed consistently throughout the relationship lifecycle. You will provide expert guidance to procurement, technology, legal, compliance and business teams, helping them make informed decisions about supplier security and resilience. Your responsibilities will include developing and maintaining the third-party cyber risk management framework, policies, standards and procedures. You will lead or oversee security due...

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks arising from suppliers, partners and other external service providers. This role will lead the development and delivery of a robust third-party cyber risk management framework, ensuring that external relationships are assessed consistently and managed in line with relevant security standards, regulatory expectations and internal risk appetite. You will oversee the end-to-end assessment lifecycle, from initial due diligence and inherent risk profiling through to control validation, remediation tracking and ongoing monitoring. Working closely with procurement, legal, technology, information security and business stakeholders, you...

Learn more

Third Party Cyber Risk Lead

Added 16/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to develop and oversee a robust approach to managing cyber security risks across suppliers, partners and other external service providers. This role will play a key part in strengthening organisational resilience by ensuring that third parties are appropriately assessed, monitored and managed throughout the supplier lifecycle. You will establish and maintain the third-party cyber risk management framework, including policies, standards, processes and risk assessment methodologies. Working closely with procurement, legal, technology, information security and business stakeholders, you will provide expert guidance during supplier selection, onboarding, contract renewal and exit activities....

Learn more

Operational/Cyber Resilience Technical Specialist

Added 26/10/2026

We are seeking an Operational/Cyber Resilience Technical Specialist to support the development, implementation and continuous improvement of operational resilience and cyber resilience capabilities. The successful candidate will work across technology, information security, risk and business teams to help ensure that critical services can withstand, respond to and recover from disruption. Key responsibilities will include identifying important business services, mapping supporting systems and dependencies, and assessing resilience across people, processes, technology, suppliers and facilities. You will contribute to impact tolerances, scenario testing, recovery planning and the maintenance of accurate resilience documentation. You will also help assess cyber threats and vulnerabilities, interpret...

Learn more

Operational/Cyber Resilience Technical Specialist

Added 26/10/2026

We are seeking an Operational/Cyber Resilience Technical Specialist to support the development, implementation and continuous improvement of operational and cyber resilience capabilities. This role will help ensure that critical services, systems and processes remain secure, available and recoverable during disruption, including cyber incidents, technology failures and third-party outages. You will work closely with technology, security, risk, continuity and business teams to identify important business services, assess vulnerabilities and define appropriate resilience measures. Key responsibilities will include conducting technical resilience assessments, supporting business impact and threat analyses, maintaining recovery strategies and validating recovery time and recovery point objectives. The role will...

Learn more

Operational/Cyber Resilience Technical Specialist

Added 26/10/2026

We are seeking an Operational/Cyber Resilience Technical Specialist to support the development, implementation and continuous improvement of operational resilience and cyber resilience capabilities. This role will help ensure that critical services, technology and information assets remain secure, available and recoverable during disruption. You will work with technology, security, risk, compliance and business teams to identify important business services, assess operational and cyber risks, and define appropriate resilience requirements. You will contribute to business impact assessments, threat-led analysis, scenario testing and the development of recovery strategies, ensuring that plans are practical, proportionate and aligned with regulatory expectations. Key responsibilities will include...

Learn more

Head of Department, Cyber & Information Resilience

Added 08/10/2026

We are seeking an experienced Head of Department, Cyber & Information Resilience to lead the development and delivery of a robust, organisation-wide approach to cybersecurity, information protection, operational resilience and business continuity. This senior role will provide strategic direction, assurance and expert advice to senior leadership, ensuring that critical services, information assets and technology environments remain secure, resilient and capable of withstanding evolving threats and disruption. You will lead a multidisciplinary team and oversee the cybersecurity and information resilience framework, including governance, risk management, security architecture, identity and access management, vulnerability management, incident response, disaster recovery and continuity planning. You...

Learn more

Head of Department, Cyber & Information Resilience

Added 08/10/2026

We are seeking an experienced and forward-thinking Head of Department, Cyber & Information Resilience to lead the development and delivery of a robust cyber security, information resilience and technology risk capability. This is a senior leadership role with responsibility for protecting critical services, information assets and operational environments against an evolving threat landscape. You will provide strategic direction, expert advice and effective oversight across cyber security, business continuity, disaster recovery, information assurance and operational resilience. You will lead a multidisciplinary team, set clear priorities and ensure that security and resilience are embedded into organisational strategy, transformation programmes and day-to-day operations....

Learn more

Head of Department, Cyber & Information Resilience

Added 08/10/2026

We are seeking an experienced Head of Department, Cyber & Information Resilience to lead the development and delivery of a comprehensive cyber security, information resilience and operational continuity capability. This senior role will provide strategic direction across cyber risk management, information assurance, technology resilience, incident response and business continuity, ensuring that critical services, data and infrastructure remain secure and available in a constantly evolving threat landscape. You will lead a multidisciplinary team and establish clear governance, policies, standards and assurance frameworks aligned with relevant regulatory obligations and recognised industry practices. Responsibilities will include identifying and managing cyber and information risks;...

Learn more

Manager - CCDI (Centre for Cyber Defence & Intelligence)

Added 07/10/2026

We are seeking an experienced and motivated Manager to lead a Centre for Cyber Defence & Intelligence (CCDI). This role will provide strategic and operational leadership across cyber defence, threat intelligence, incident response, vulnerability management and security monitoring. The successful candidate will help strengthen organisational resilience by developing effective cyber security capabilities, improving security maturity and ensuring that risks are identified, assessed and managed appropriately. Key responsibilities will include setting the centre’s direction, priorities and operating procedures; managing and mentoring a multidisciplinary cyber security team; coordinating the detection, investigation and response to cyber incidents; and overseeing the collection, analysis and...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.