Senior Cyber Policy & Information Resilience Lead

PSR Limited; Greater London; On-site; GBP 54,000 - 75,000; Full time

Benefits offered by this job

25 days annual leave

Pension 8–12%

Private healthcare

Income protection

Volunteer days

Job summary

Financial Conduct Authority (FCA) is seeking a Cyber Policy Lead to shape and govern the Cyber & Information Resilience policy framework. The role focuses on updating standards, guiding policy across the organisation, and aligning with risk appetite while acting as the main policy contact for BAU and project work.

You will lead horizon-scanning, support reporting on policy compliance, and collaborate with the CISO and HR to interpret policy requirements.

Qualifications

• Experience designing, drafting and maintaining cyber & information security policies.
• Knowledge of ISO 27001, NIST CSF, CIS Controls.
• Understanding of technical security controls including network, cloud, IAM and vulnerability management.
• Experience engaging with senior stakeholders up to Director level.

Responsibilities

• Manage Cyber & Information Policy and Standards updates per refresh cycles.
• Modernise policy & standards suite e.g. standards on a page.
• Act as the primary point of contact for policy-related queries, covering BAU and project activities.
• Support reporting on Policy Owner compliance and effectiveness of policies.
• Conduct horizon-scanning to identify emerging risks, trends, and regulatory changes.
• Develop requirements for a new self-service policy model for low-risk projects.
• Manage and modernise the Policy Waiver process.
• Provide policy guidance and interpretation to investigation teams and HR.

Skills

Policy design

Policy maintenance

Cybersecurity standards

ISO 27001

NIST CSF

Cloud security

IAM

Vulnerability management

Stakeholder management

Regulatory risk

Job description

Financial Conduct Authority (FCA) is seeking a Cyber Policy Lead to shape and govern the Cyber & Information Resilience policy framework. The role focuses on updating standards, guiding policy across the organisation, and aligning with risk appetite while acting as the main policy contact for BAU and project work.

You will lead horizon-scanning, support reporting on policy compliance, and collaborate with the CISO and HR to interpret policy requirements.