Cyber Security Governance Lead

Nortal; Scotland; On-site; GBP 70,000 - 100,000; Full time

Job summary

Nortal is seeking an experienced Cyber Security Governance Lead to drive cybersecurity governance within a major government organization. This role involves developing governance frameworks and compliance with key industry standards, working in a dynamic environment to ensure national security and infrastructure integrity.

Benefits

Professional development opportunities

Collaborative and agile work environment

Work-life balance and flexible work arrangements

Qualifications

• Proven track record in cybersecurity governance transformations.
• Deep knowledge of frameworks: NIST, ISO 27001, CIS Controls.
• Minimum 10 years' experience in cybersecurity transformation.

Responsibilities

• Design and implement effective cyber governance structures.
• Lead continuous improvement initiatives.
• Ensure compliance with regulatory standards.

Skills

Analytical skills

Strategic thinking

Stakeholder engagement

Risk management

Education

Degree in Cybersecurity, Information Technology, Risk Management

Job description

Overview

At Nortal, we believe in thinking big—creating digital solutions with meaningful, far-reaching impact. With over 2,000 professionals across 26 locations, we’ve spent over two decades helping governments, enterprises, and healthcare institutions in Europe, North America and the Middle East build secure digital organizations, businesses and entire societies.

In the UK, we are proud to empower government and defence organisations to transform their operations, services and digital infrastructure, delivering human-centric, resilient, and secure solutions.

We provide top-tier cybersecurity services that enable organizations to operate with confidence — securing supply chains, ensuring compliance, and fortifying critical systems.

We are seeking an experienced Cyber Security Governance Lead to join a major government organisation at the heart of national security and infrastructure. This pivotal role will help shape and enhance the organisation’s cybersecurity governance by developing robust frameworks, implementing effective structures, and aligning operational models with industry standards and regulatory expectations.As a trusted advisor in a multidisciplinary environment, you will work across functions to embed secure-by-design principles, assess cyber workforce requirements, and lead the development of governance policies and controls.

Responsibilities

• Design and implement effective cyber governance structures and risk management processes.
• Develop organisational models that strengthen governance and streamline cybersecurity operations.
• Collaborate with multi-disciplinary teams to embed cybersecurity into governance frameworks, considering people, process, and technology.
• Propose workforce structures and SQEP (Suitably Qualified and Experienced Personnel) requirements for steady-state operations.
• Define, monitor, and report metrics to measure the effectiveness of cyber governance.
• Lead continuous improvement initiatives and mentor key personnel within governance functions.
• Ensure all policies, procedures, and controls are compliant with regulatory standards (NCSC, ISO 27001, NIST, CIS Controls).
• Identify, assess, and manage risks to project or organisational goals.
• Build alignment with executive stakeholders, board members, and external partners to ensure accountability and clear decision-making processes.

Qualifications

• A proven track record in leading cybersecurity risk and governance transformations in complex or government/defence environments.
• Deep knowledge of cybersecurity frameworks (e.g., NIST, ISO 27001, CIS Controls) and regulatory obligations.
• Experience designing and implementing cybersecurity governance structures from the ground up.
• Strong analytical and strategic thinking skills to assess risks and influence operational change.
• Excellent communication and stakeholder engagement skills
• Demonstrated ability to manage concurrent projects and priorities under tight deadlines.
• A passion for innovation and continuous learning in cybersecurity.

Preferred Qualifications

• Degree in Cybersecurity, Information Technology, Risk Management, or related field.
• Professional certifications: CISSP, CISM, CRISC (or equivalent experience).
• Minimum 10 years' experience in cybersecurity transformation, ideally in a defence or maritime context.
• UK Government security clearance (DV/SC)

Why Nortal

• We live by our values: commit to delivering value and results, take ownership, empower yourself and others, and own your future and growth
• A collaborative and agile work environment working with industry experts
• Opportunities for professional development through training and mentorship
• An international team with a people-oriented culture, work-life balance, and flexible work arrangements.

#LI-DNI