Cyber Policy Lead

Reference: ji0awx3c8rt7ubdcm8y6

We are seeking an experienced Cyber Policy Lead to develop, maintain and promote a clear, effective cyber security policy framework. This is an influential role, working across technology, risk, legal, compliance and operational teams to strengthen cyber resilience and ensure that security expectations are understood and consistently applied.

You will lead the creation, review and implementation of cyber security policies, standards and supporting guidance. This will include translating regulatory requirements, recognised industry frameworks and emerging threats into practical organisational controls. You will oversee the policy lifecycle, ensuring that documents remain accurate, proportionate and aligned with changing business needs, technology developments and the wider risk environment.

The role will involve engaging with senior stakeholders to communicate policy requirements, secure approval and support adoption. You will provide expert advice on policy interpretation, assess and manage exceptions, and contribute to governance forums and assurance activities. You will also work with control owners to monitor compliance, identify areas for improvement and support remediation where requirements are not being met.

As part of the wider cyber security function, you will contribute to risk assessments, audits, regulatory reviews and security awareness initiatives. You will be expected to monitor developments in legislation, regulation and threat activity, assessing their potential impact and recommending appropriate responses. The role may also include mentoring colleagues and supporting the development of consistent policy management processes.

Applicants should have substantial experience in cyber security policy, governance, risk or compliance, with a strong understanding of security frameworks such as ISO 27001, NIST or equivalent. Experience of interpreting regulatory obligations and producing clear, practical policy documentation is essential. You will need excellent written and verbal communication skills, sound judgement and the ability to influence stakeholders at all levels.

We are looking for someone who is organised, collaborative and confident operating in a complex environment. Relevant professional qualifications in cyber security, information assurance, risk management or governance are desirable. A commitment to continuous improvement, strong attention to detail and the ability to manage competing priorities will be key to success.

COMPETITIVE SALARY
Added 03/11/2026
Reference: ji0awx3c8rt7ubdcm8y6

Other similar jobs

Lead Technology, Resilience and Cyber Associate

Added 03/11/2026

We are seeking a Lead Technology, Resilience and Cyber Associate to support the development and delivery of robust technology, operational resilience and cyber security practices. This is an opportunity to play a key role in strengthening the organisation’s ability to manage technology-related risks, respond to disruption and protect critical services, information and stakeholders. You will lead or contribute to assessments of technology resilience, cyber risk, business continuity and disaster recovery arrangements. Responsibilities will include identifying vulnerabilities, reviewing control effectiveness, assessing important business services and supporting scenario testing and remediation planning. You will work closely with technology, risk, compliance, audit and...

Learn more

Third Party Cyber Risk Lead

Added 21/10/2026

We are seeking an experienced Third Party Cyber Risk Lead to strengthen the management of cyber security risks across a complex network of suppliers, partners and outsourced service providers. This is a key role responsible for ensuring that third parties meet appropriate security expectations throughout the procurement, onboarding, monitoring and offboarding lifecycle. You will develop and maintain a proportionate third-party cyber risk management framework, including security standards, assessment methodologies, risk-rating criteria and assurance requirements. Working closely with procurement, legal, technology, information security and business stakeholders, you will assess supplier risks, identify control gaps and agree practical remediation plans. You will...

Learn more

Operational/Cyber Resilience Technical Specialist

Added 03/11/2026

We are seeking an Operational/Cyber Resilience Technical Specialist to support the development, implementation and continuous improvement of resilience capabilities across critical technology, operational and business services. This role will work with technical teams, service owners, risk specialists and senior stakeholders to identify vulnerabilities, strengthen resilience and ensure the organisation can prepare for, respond to and recover from disruptive events. Key responsibilities will include assessing operational and cyber resilience across systems, applications, infrastructure, suppliers and business processes. You will help maintain resilience frameworks, policies, standards and control requirements, while contributing to impact assessments, risk analysis, scenario testing and remediation planning. The...

Learn more

Regulatory Cyber Assurance Principal

Added 21/10/2026

We are seeking an experienced Regulatory Cyber Assurance Principal to lead the development and delivery of cyber assurance activities across a complex, highly regulated environment. This is a senior role for an individual who can translate regulatory expectations into practical controls, measurable outcomes and clear assurance plans, while providing constructive challenge to technology and business leaders. You will define and maintain the cyber assurance framework, ensuring alignment with relevant legislation, regulatory requirements, industry standards and internal policies. You will oversee risk-based assurance reviews covering areas such as governance, identity and access management, infrastructure security, cloud services, third-party risk, vulnerability management,...

Learn more

Manager – CCDI (Centre for Cyber Defence & Intelligence)

Added 21/10/2026

An exciting opportunity has arisen for an experienced cyber security professional to lead a specialist Cyber Defence and Intelligence function. This role will provide strategic direction and operational oversight across cyber threat intelligence, security monitoring, incident response and defensive cyber operations. You will help strengthen organisational resilience by identifying emerging threats, assessing risk and translating intelligence into practical security improvements. You will manage and develop a team of cyber security specialists, setting clear objectives, supporting professional development and fostering a collaborative, service-focused culture. Working closely with technical, operational and senior stakeholders, you will ensure that cyber security priorities are understood...

Learn more

Head of Department, Cyber & Information Resilience

Added 21/10/2026

We are seeking an experienced and strategic Head of Department, Cyber & Information Resilience to lead the development and delivery of a robust cyber security, information assurance and operational resilience capability. This is a senior leadership role, responsible for protecting critical services, information assets and technology environments while enabling the organisation to manage disruption, adapt to emerging threats and recover effectively. You will set the strategic direction for cyber and information resilience, ensuring that policies, frameworks and controls align with regulatory obligations, recognised industry standards and organisational priorities. Leading a multidisciplinary team, you will oversee cyber risk management, security operations,...

Learn more

Cyber Policy Lead

Added 02/11/2026

We are seeking an experienced Cyber Policy Lead to shape, develop and maintain a clear, proportionate policy framework that supports secure and effective working across a complex organisation. This is a strategic role requiring strong knowledge of cyber security, governance, risk management and regulatory expectations, alongside the ability to translate technical and legislative requirements into practical guidance. You will lead the development and review of cyber security policies, standards and supporting procedures, ensuring they remain aligned with current threats, recognised frameworks and applicable legal obligations. Working closely with technology, risk, legal, compliance, audit and operational teams, you will identify policy...

Learn more

Cyber Policy Lead

Added 02/11/2026

We are seeking an experienced Cyber Policy Lead to shape and develop cyber security policy across a complex organisation. This is an influential role for someone who can translate emerging cyber risks, regulatory expectations and technical developments into clear, practical and proportionate policy. You will work with senior stakeholders, security specialists, risk teams and business leaders to strengthen cyber resilience and support informed decision-making. You will lead the end-to-end policy lifecycle, including researching requirements, drafting and reviewing policies, coordinating consultation, securing approval and monitoring implementation. You will maintain a coherent suite of cyber security policies, standards and supporting guidance, ensuring...

Learn more

Cyber Policy Lead

Added 02/11/2026

We are seeking an experienced Cyber Policy Lead to shape and strengthen cyber security policy across a complex, highly regulated environment. This is an influential role for a policy professional who can translate emerging cyber risks, legal requirements and industry standards into clear, practical guidance that supports secure and effective business operations. You will lead the development, review and maintenance of the cyber security policy framework, ensuring that policies remain proportionate, current and aligned with recognised standards and regulatory expectations. You will assess the impact of emerging threats, technologies and legislation, provide authoritative advice to senior stakeholders, and ensure that...

Learn more

Security Governance & Policy Lead - AI

Added 06/10/2026

We are seeking a Security Governance & Policy Lead - AI to develop and strengthen the frameworks that enable the safe, responsible and compliant use of artificial intelligence. This role will lead the design, implementation and continuous improvement of AI security governance, policies, standards and control frameworks across the organisation. You will work at the intersection of cybersecurity, risk, data protection, legal compliance and emerging technology, helping stakeholders understand and manage the security implications of AI adoption. Your responsibilities will include defining AI security and risk management requirements; maintaining policies, procedures and control libraries; establishing governance processes for AI systems,...

Learn more

Governance, Data Protection (GDPR) & Policy Manager

Added 20/10/2026

We are seeking an experienced Governance, Data Protection (GDPR) & Policy Manager to lead the development and maintenance of effective governance, data protection and policy frameworks. This is a key role responsible for ensuring that organisational practices comply with the UK GDPR, Data Protection Act 2018 and other relevant legislation, while supporting a strong culture of accountability, transparency and continuous improvement. You will provide expert advice on data protection matters, including data subject rights, privacy notices, records of processing activities, data protection impact assessments, information-sharing agreements, retention schedules and personal data breaches. You will monitor regulatory developments, assess their impact...

Learn more

Security Compliance Policy Associate

Added 16/10/2026

We are seeking a Security Compliance Policy Associate to support the development, implementation and ongoing improvement of information security policies, standards and procedures. This role will help ensure that security practices remain aligned with applicable legislation, regulatory expectations, industry frameworks and internal risk requirements. You will work closely with colleagues across security, risk, legal, technology and business teams to promote consistent, practical and effective compliance. Key responsibilities will include maintaining the security policy framework, coordinating periodic policy reviews and monitoring changes in relevant laws, regulations and recognised standards. You will assist with compliance assessments, control mapping, risk and gap analysis,...

Learn more

Cyber Security Business Partner / Cyber Risk Lead - Contract (Inside IR35)

Added 02/11/2026

We are seeking an experienced Cyber Security Business Partner / Cyber Risk Lead to support the effective management of cyber security risk across a complex organisation. This is a contract opportunity, operating inside IR35, and is suited to a security professional who can combine strong technical understanding with excellent stakeholder engagement and business-focused risk management. The successful candidate will act as a trusted adviser to senior business and technology stakeholders, helping them understand cyber security risks, regulatory obligations and appropriate controls. You will identify, assess and prioritise cyber risks; maintain clear risk records; support the development and monitoring of remediation...

Learn more

Client Service Delivery Lead / Cyber Analyst (Commercial Banking)

Added 30/10/2026

We are seeking a Client Service Delivery Lead / Cyber Analyst to support the secure and effective delivery of technology services within a commercial banking environment. This is a varied role combining client relationship management, service delivery leadership and cyber security analysis, with responsibility for maintaining high standards of operational resilience, risk management and customer satisfaction. You will act as a key point of contact for internal stakeholders and business clients, ensuring that services are delivered in line with agreed service levels and regulatory expectations. Responsibilities will include monitoring service performance, leading service review meetings, managing incidents and escalations, coordinating...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.