Cyber Security Governance Lead

Nortal; Dumbarton; On-site; GBP 80,000 - 120,000; Full time

Job summary

A consulting firm in the UK is seeking an experienced Cyber Security Governance Lead to shape cybersecurity governance and develop robust frameworks for national security clients. This role involves designing governance structures and managing risks while collaborating with multidisciplinary teams. Ideal candidates will have a strong background in cybersecurity and relevant professional certifications. Competitive salary and opportunities for professional development offered.

Benefits

Collaborative and agile work environment

Opportunities for professional development

Flexible work arrangements

Qualifications

• Proven track record in cybersecurity risk and governance transformations.
• Deep knowledge of cybersecurity frameworks and regulatory obligations.
• Experience designing and implementing governance structures.
• Strong analytical skills to assess risks and influence change.
• Ability to manage multiple projects under tight deadlines.

Responsibilities

• Design and implement effective cyber governance structures.
• Develop organizational models for cybersecurity operations.
• Collaborate to embed cybersecurity into frameworks.
• Monitor and report metrics to measure governance effectiveness.
• Lead continuous improvement initiatives in governance.

Skills

Cybersecurity governance transformations

Knowledge of NIST, ISO 27001, CIS Controls

Analytical and strategic thinking

Excellent communication skills

Project management

Education

Professional certifications: CISSP, CISM, CRISC

Job description

Overview

In the UK, we are proud to empower government and defence organisations to transform their operations, services and digital infrastructure, delivering human-centric, resilient, and secure solutions.

We provide top-tier cybersecurity services that enable organizations to operate with confidence - securing supply chains, ensuring compliance, and fortifying critical systems.

We are seeking an experienced Cyber Security Governance Lead to join our team and work with clients focussing on national security and infrastructure. This pivotal role will help shape cybersecurity governance by developing robust frameworks, implementing effective structures, and aligning operational models with industry standards and regulatory expectations.

As a trusted advisor in a multidisciplinary environment, you will work across functions to embed secure-by-design principles, assess cyber workforce requirements, and lead the development of governance policies and controls.

Responsibilities

• Design and implement effective cyber governance structures and risk management processes.
• Develop organisational models that strengthen governance and streamline cybersecurity operations.
• Collaborate with multi-disciplinary teams to embed cybersecurity into governance frameworks, considering people, process, and technology.
• Propose workforce structures and SQEP (Suitably Qualified and Experienced Personnel) requirements for steady-state operations.
• Define, monitor, and report metrics to measure the effectiveness of cyber governance.
• Lead continuous improvement initiatives and mentor key personnel within governance functions.
• Ensure all policies, procedures, and controls are compliant with regulatory standards (NCSC, ISO 27001, NIST, CIS Controls).
• Identify, assess, and manage risks to project or organisational goals.
• Build alignment with executive stakeholders, board members, and external partners to ensure accountability and clear decision-making processes.

Qualifications

• A proven track record in leading cybersecurity risk and governance transformations in complex or government/defence environments.
• Deep knowledge of cybersecurity frameworks (e.g., NIST, ISO 27001, CIS Controls) and regulatory obligations.
• Experience designing and implementing cybersecurity governance structures from the ground up.
• Strong analytical and strategic thinking skills to assess risks and influence operational change.
• Excellent communication and stakeholder engagement skills
• Demonstrated ability to manage concurrent projects and priorities under tight deadlines.
• A passion for innovation and continuous learning in cybersecurity.

Preferred Qualifications

• Professional certifications: CISSP, CISM, CRISC (or equivalent experience).
• Minimum 10 years' experience in cybersecurity transformation, ideally in a defence or maritime context.
• UK Government security clearance (DV/SC)

Why Nortal

• We live by our values: commit to delivering value and results, take ownership, empower yourself and others, and own your future and growth
• A collaborative and agile work environment working with industry experts
• Opportunities for professional development through training and mentorship
• An international team with a people-oriented culture, work-life balance, and flexible work arrangements.