Cyber Policy Lead
We are seeking an experienced Cyber Policy Lead to shape, develop and maintain a clear, proportionate policy framework that supports secure and effective working across a complex organisation. This is a strategic role requiring strong knowledge of cyber security, governance, risk management and regulatory expectations, alongside the ability to translate technical and legislative requirements into practical guidance.
You will lead the development and review of cyber security policies, standards and supporting procedures, ensuring they remain aligned with current threats, recognised frameworks and applicable legal obligations. Working closely with technology, risk, legal, compliance, audit and operational teams, you will identify policy gaps, assess their impact and agree appropriate improvements. You will also provide authoritative advice on policy interpretation, exceptions and risk acceptance.
The role will involve monitoring changes in legislation, regulation and industry practice, assessing their implications and ensuring that relevant requirements are reflected in internal controls and guidance. You will support assurance activity, contribute to governance forums and prepare clear reports, briefings and recommendations for senior stakeholders. You may also lead awareness initiatives, policy communications and engagement activity to promote secure behaviours and consistent adoption.
We are looking for someone with substantial experience in cyber security policy, governance, risk or compliance, ideally within a large, regulated or public-facing environment. You should have a strong understanding of information security principles, risk-based control frameworks and relevant standards such as ISO 27001, NIST or equivalent. Experience of policy lifecycle management, regulatory change and working with senior decision-makers is essential.
Excellent written and verbal communication skills are required, together with the confidence to influence stakeholders at all levels. You will be organised, analytical and pragmatic, able to manage competing priorities while maintaining attention to detail. Relevant professional qualifications in cyber security, information assurance, risk or governance would be advantageous, as would experience of delivering security awareness or transformation programmes.
Cyber Policy Lead
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Cyber Security Engineer
- Interim Cyber Security Interna...
- Lead DevSecOps Engineer
- Data Privacy Specialist UK
- Security and Compliance Engine...
- GCIO Operations Manager - Cybe...
- Information Security Analyst
- Senior Director - DevOps Secur...
- Head of Information Security
- Lead Cloud Security Engineer
- Cyber Policy Lead
- IT Security Auditor