Cyber Policy Lead
Core
Manage and maintain the Cyber & Information Resilience Policy Framework, including standards, procedures, and guidance, while supporting the articulation of the organization's Cyber Risk Appetite.
Role type
Senior Associate - Regulatory (Cyber Policy)
Builds
Policy framework, standards, and guidance for cyber and information resilience
Domain
Financial Services Regulation / Cyber Policy
Required skills
Cyber policy design and lifecycle management, Industry standards knowledge (ISO 27001, NIST, CIS), Technical security controls understanding, Information management and Data Privacy, Stakeholder management, Organizational change delivery, Risk identification and management
Preferred skills
Horizon scanning, Policy gap analysis, Self-service policy model development, Policy waiver process management
Technologies
ISO 27001, NIST Cybersecurity Framework, CIS Controls
Responsibilities
Manage Cyber & Information Policy and Security Standards updates, Modernize policy & standards suite, Act as primary point of contact for policy queries, Support reporting on Policy Owner compliance, Conduct policy gap analysis, Complete horizon-scanning activities, Develop requirements for new self-service policy model, Manage Policy Waiver process, Provide policy guidance to investigation teams and HR
Seniority
Senior Associate
