Job Search

We are seeking an experienced Cyber Policy Lead to shape and develop cyber security policy across a complex organisation. This is an influential role for someone who can translate emerging cyber risks, regulatory expectations and technical developments into clear, practical and proportionate policy. You will work with senior stakeholders, security specialists, risk teams and business leaders to strengthen cyber resilience and support informed decision-making.

You will lead the end-to-end policy lifecycle, including researching requirements, drafting and reviewing policies, coordinating consultation, securing approval and monitoring implementation. You will maintain a coherent suite of cyber security policies, standards and supporting guidance, ensuring that they remain aligned with relevant legislation, recognised frameworks and organisational risk appetite. The role will also involve identifying gaps, assessing policy effectiveness and recommending improvements.

Key responsibilities will include advising on cyber governance and control requirements; interpreting regulatory and industry developments; contributing to risk assessments and assurance activity; supporting audits and regulatory engagement; and producing concise reports, briefings and recommendations for senior audiences. You will also help embed policy through awareness, communications, training and engagement, ensuring that requirements are understood and applied consistently across varied teams and services.

We are looking for a strong communicator with demonstrable experience in cyber security policy, information security governance, risk or a closely related discipline. You will have a sound understanding of security principles, control frameworks and relevant regulatory obligations, together with the ability to analyse complex information and present it clearly. Experience of working across technical and non-technical communities, managing competing priorities and influencing without direct authority is essential.

Professional qualifications in cyber security, information governance, risk management or policy development would be advantageous. Above all, you will bring sound judgement, attention to detail, a collaborative approach and the confidence to challenge constructively. This is an opportunity to make a visible contribution to cyber maturity while helping create policies that are practical, effective and fit for purpose.

We are seeking an experienced Cyber Policy Lead to shape, develop and maintain a clear, proportionate policy framework that supports secure and effective working across a complex organisation. This is a strategic role requiring strong knowledge of cyber security, governance, risk management and regulatory expectations, alongside the ability to translate technical and legislative requirements into practical guidance.

You will lead the development and review of cyber security policies, standards and supporting procedures, ensuring they remain aligned with current threats, recognised frameworks and applicable legal obligations. Working closely with technology, risk, legal, compliance, audit and operational teams, you will identify policy gaps, assess their impact and agree appropriate improvements. You will also provide authoritative advice on policy interpretation, exceptions and risk acceptance.

The role will involve monitoring changes in legislation, regulation and industry practice, assessing their implications and ensuring that relevant requirements are reflected in internal controls and guidance. You will support assurance activity, contribute to governance forums and prepare clear reports, briefings and recommendations for senior stakeholders. You may also lead awareness initiatives, policy communications and engagement activity to promote secure behaviours and consistent adoption.

We are looking for someone with substantial experience in cyber security policy, governance, risk or compliance, ideally within a large, regulated or public-facing environment. You should have a strong understanding of information security principles, risk-based control frameworks and relevant standards such as ISO 27001, NIST or equivalent. Experience of policy lifecycle management, regulatory change and working with senior decision-makers is essential.

Excellent written and verbal communication skills are required, together with the confidence to influence stakeholders at all levels. You will be organised, analytical and pragmatic, able to manage competing priorities while maintaining attention to detail. Relevant professional qualifications in cyber security, information assurance, risk or governance would be advantageous, as would experience of delivering security awareness or transformation programmes.

We are seeking an experienced Cyber Policy Lead to shape and strengthen cyber security policy across a complex, highly regulated environment. This is an influential role for a policy professional who can translate emerging cyber risks, legal requirements and industry standards into clear, practical guidance that supports secure and effective business operations.

You will lead the development, review and maintenance of the cyber security policy framework, ensuring that policies remain proportionate, current and aligned with recognised standards and regulatory expectations. You will assess the impact of emerging threats, technologies and legislation, provide authoritative advice to senior stakeholders, and ensure that policy requirements are understood and consistently applied across the organisation.

Key responsibilities will include establishing policy priorities and a forward-looking roadmap; coordinating consultation and approval activity; defining supporting standards, procedures and guidance; and monitoring compliance through appropriate assurance, reporting and review mechanisms. You will work closely with risk, governance, legal, technology, privacy and operational teams, helping to resolve policy exceptions and strengthen organisational resilience.

The successful candidate will have substantial experience in cyber security policy, governance, risk or a closely related discipline. You will be confident interpreting regulatory and industry requirements and converting them into concise, actionable policy. Experience working with frameworks such as ISO 27001, NIST Cybersecurity Framework or CIS Controls would be advantageous, as would knowledge of information assurance, third-party risk and data protection.

You will be an excellent communicator, able to influence senior decision-makers and engage effectively with both technical and non-technical audiences. Strong analytical, drafting and stakeholder management skills are essential, together with the ability to manage competing priorities and deliver high-quality work in a changing environment. Relevant professional qualifications in cyber security, information risk, governance or policy are desirable.

This role offers the opportunity to make a tangible contribution to cyber resilience, embedding consistent standards and helping people manage security risk with confidence. Flexible working arrangements may be available, subject to business requirements.