Cyber Security Policy Specialist/ Consultant

Reed; Sheffield; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A consulting firm in Sheffield is seeking a Cyber Security Policy Specialist to develop and refine cybersecurity policies. This role focuses on cookie management and regulatory compliance. Candidates should have a strong background in policy writing and understanding of digital privacy and risk management. The position allows for remote work, with an expectation to be on site 3 days a week.

Qualifications

• Proven experience in cybersecurity policy writing within large organisations.
• Understanding of GDPR and ePrivacy regulations.
• Familiarity with cookie management and external attack surface risks.

Responsibilities

• Draft and maintain cybersecurity policies ensuring regulatory alignment.
• Develop policies for cookie usage and external threats.
• Collaborate with teams to enforce and update policies.
• Monitor regulatory changes for actionable policy updates.
• Educate stakeholders on policy implications.

Skills

Cybersecurity policy writing

Regulatory compliance

Digital privacy regulations

Cookie management

Risk management

Tools

NIST Framework

ISO 27001

Job description

Overview

Cyber Security Policy Specialist/ Consultant

CYBER SECURITY POLICY/ CYBER SECURITY CONSULTANT/ CYBER SECURITY POLICIES/ COOKIE MANAGEMENT/ PRIVACY REGULATIONS/ GDPR/ COMPLIANCE/ RISK/ DIGITAL PRIVACY/ NIST/ ISO 27001

6 Months- Extensions Likely

Sheffield/Remote- must be willing to be on site 3 days a week

Our client is looking for a detail-oriented and experienced Cyber Policy Specialist to lead the development and refinement of the organisation's cybersecurity policies, with a particular focus on cookie governance and external attack surface management.

This role is ideal for someone with a strong background in policy writing and a deep understanding of cyber risk, regulatory compliance, and digital privacy.

Responsibilities

• Draft, review, and maintain cybersecurity policies, standards, and procedures, ensuring clarity, accuracy, and alignment with regulatory and business requirements.
• Develop and update policies related to cookie usage, tracking technologies, and external attack surface exposure.
• Collaborate with technical teams, legal, and compliance to ensure policies are practical, enforceable, and aligned with current threat landscapes.
• Monitor changes in cybersecurity regulations and best practices, translating them into actionable policy updates.
• Educate stakeholders on policy implications and ensure consistent understanding and application across the organisation.

Key Experience

• Proven experience in cybersecurity policy writing, ideally within large or complex organisations.
• Understanding of cookie management, privacy regulations (e.g., GDPR, ePrivacy), and external attack surface risks.
• Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001) and governance models.

In the first instance please submit your CV