Cyber Security Governance Lead

Nortal; Dumbarton; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading cybersecurity firm in the UK is looking for a Cyber Security Governance Lead to shape governance frameworks and ensure compliance with regulatory standards. The role demands extensive experience in cybersecurity transformations, particularly within government or defense environments. You will collaborate across teams, evaluate risks, and develop effective governance processes. Ideal candidates will have robust analytical skills and excellent stakeholder engagement abilities. Opportunities for professional development and a flexible work culture are offered.

Benefits

Opportunities for professional development

Collaborative and agile work environment

Flexible work arrangements

Qualifications

• Proven track record in leading cybersecurity governance in complex environments.
• Deep knowledge of frameworks like NIST and ISO 27001.
• Experience in designing cybersecurity governance structures.

Responsibilities

• Design and implement cyber governance structures.
• Develop organisational models to strengthen governance.
• Collaborate with teams to embed cybersecurity into frameworks.
• Define and report metrics for cyber governance effectiveness.
• Lead continuous improvement initiatives.

Skills

Leading cybersecurity risk and governance transformations

Knowledge of cybersecurity frameworks

Designing cybersecurity governance structures

Analytical and strategic thinking

Communication and stakeholder engagement

Managing concurrent projects

Continuous learning in cybersecurity

Education

Professional certifications (CISSP, CISM, CRISC)

10 years' experience in cybersecurity transformation

Job description

Overview

At Nortal, we believe in thinking big-creating digital solutions with meaningful, far-reaching impact. With over 2,000 professionals across 26 locations, we've spent over two decades helping governments, enterprises, and healthcare institutions in Europe, North America and the Middle East build secure digital organizations, businesses and entire societies.

In the UK, we are proud to empower government and defence organisations to transform their operations, services and digital infrastructure, delivering human-centric, resilient, and secure solutions.

We provide top-tier cybersecurity services that enable organizations to operate with confidence - securing supply chains, ensuring compliance, and fortifying critical systems.

We are seeking an experienced Cyber Security Governance Lead to join our team and work with clients focussing on national security and infrastructure. This pivotal role will help shape cybersecurity governance by developing robust frameworks, implementing effective structures, and aligning operational models with industry standards and regulatory expectations.

As a trusted advisor in a multidisciplinary environment, you will work across functions to embed secure-by-design principles, assess cyber workforce requirements, and lead the development of governance policies and controls.

Responsibilities

• Design and implement effective cyber governance structures and risk management processes.
• Develop organisational models that strengthen governance and streamline cybersecurity operations.
• Collaborate with multi-disciplinary teams to embed cybersecurity into governance frameworks, considering people, process, and technology.
• Propose workforce structures and SQEP (Suitably Qualified and Experienced Personnel) requirements for steady-state operations.
• Define, monitor, and report metrics to measure the effectiveness of cyber governance.
• Lead continuous improvement initiatives and mentor key personnel within governance functions.
• Ensure all policies, procedures, and controls are compliant with regulatory standards (NCSC, ISO 27001, NIST, CIS Controls).
• Identify, assess, and manage risks to project or organisational goals.
• Build alignment with executive stakeholders, board members, and external partners to ensure accountability and clear decision-making processes.

Qualifications

• A proven track record in leading cybersecurity risk and governance transformations in complex or government/defence environments.
• Deep knowledge of cybersecurity frameworks (e.g., NIST, ISO 27001, CIS Controls) and regulatory obligations.
• Experience designing and implementing cybersecurity governance structures from the ground up.
• Strong analytical and strategic thinking skills to assess risks and influence operational change.
• Excellent communication and stakeholder engagement skills
• Demonstrated ability to manage concurrent projects and priorities under tight deadlines.
• A passion for innovation and continuous learning in cybersecurity.

Preferred Qualifications

• Professional certifications: CISSP, CISM, CRISC (or equivalent experience).
• Minimum 10 years' experience in cybersecurity transformation, ideally in a defence or maritime context.
• UK Government security clearance (DV/SC)

Why Nortal

• We live by our values: commit to delivering value and results, take ownership, empower yourself and others, and own your future and growth
• A collaborative and agile work environment working with industry experts
• Opportunities for professional development through training and mentorship
• An international team with a people-oriented culture, work-life balance, and flexible work arrangements.