Cyber Policy Lead
Core
Manage and modernize the Cyber & Information Resilience Policy Framework, standards, and procedures for the UK Financial Conduct Authority to support secure regulation and risk appetite articulation.
Role type
Senior Associate (Policy & Risk)
Builds
Policy framework, standards, and guidance for cyber resilience
Domain
Financial Services Regulation / Cyber Policy
Required skills
Cyber policy design and lifecycle management, ISO 27001 and NIST framework knowledge, technical security controls understanding, stakeholder management at director level, organizational change delivery, risk identification and management
Preferred skills
Horizon scanning, policy gap analysis, self-service policy model development
Technologies
ISO 27001, NIST Cybersecurity Framework, CIS Controls
Responsibilities
Manage policy and standards updates, act as primary contact for policy queries, support compliance reporting, conduct horizon scanning, develop requirements for self-service policy models, manage policy waiver process, provide policy guidance to investigation teams and HR
Seniority
Senior Associate, hands-on IC
