Cyber Policy Lead: Risk & Resilience Strategist

Financial Conduct Authority; Ledston; Híbrido; GBP 54.000 - 75.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

25 days annual leave

Private healthcare

Non-contributory pension

Volunteer days

Descripción de la vacante

Financial Conduct Authority is seeking a Cyber Policy Lead in the Operations division. This Senior Associate - Regulatory role focuses on maintaining the Cyber & Information Resilience Policy Framework, standards, procedures and guidance, aligning with the FCA’s risk appetite and regulatory expectations.

You will coordinate with the Risk lead and CISO, support policy queries, and help deliver governance across the organisation’s cyber risk landscape within the Policy & Risk team.

Formación

• Experience in designing, drafting and maintaining cyber & information security policies, standards and procedures across their full lifecycle.
• Extensive working knowledge of ISO 27001, NIST Cybersecurity Framework (CIS), CIS Controls.
• Ability to engage with stakeholders at all levels, including Directors.
• Experience delivering organisational change and risk management.

Responsabilidades

• Manage Cyber & Information Policy and Cyber & Information Security Standards updates in line with refresh periods.
• Look to modernise our policy & standards suite on a page.
• Act as the primary point of contact for policy-related queries, covering BAU and project activities.
• Support reporting on Policy Owner compliance effectiveness of our policies.
• Conduct policy gap analysis and provide recommendations for improvement.
• Complete horizon-scanning to identify emerging risks, trends, regulatory changes.
• Develop requirements for a new self-service policy model for low-risk projects considering FCA’s risk appetite.
• Manage and modernise the Policy Waiver process.
• Provide policy guidance and interpretation to specialist investigation teams and HR on policy requirements.

Conocimientos

Policy design

Standards knowledge

Descripción del empleo

Financial Conduct Authority is seeking a Cyber Policy Lead in the Operations division. This Senior Associate - Regulatory role focuses on maintaining the Cyber & Information Resilience Policy Framework, standards, procedures and guidance, aligning with the FCA’s risk appetite and regulatory expectations.

You will coordinate with the Risk lead and CISO, support policy queries, and help deliver governance across the organisation’s cyber risk landscape within the Policy & Risk team.