Senior Cyber Policy & Standards Lead

Financial Conduct Authority; Leeds; On-site; GBP 54,000 - 75,000; Full time

Benefits offered by this job

25 days annual leave

Pension (8-12%) and life assurance

Private healthcare

Volunteering days

Flexible benefits

Job summary

Financial Conduct Authority is seeking a Cyber Policy Lead within the Cyber and Information Resilience function. The role focuses on managing the Cyber & Information Policy Framework, updates to standards, and guidance to ensure effective governance and regulatory alignment across the FCA.

You will support risk reporting, horizon scanning for emerging risks, and collaboration with the CISO and GHR for non-compliance insights. A strong policy background and stakeholder management are essential.

Qualifications

• Experience designing and maintaining cyber information security policies and standards across their full lifecycle.
• Understanding of technical security controls including network, cloud, identity and access management, and vulnerability management.
• Excellent stakeholder engagement at all levels, including Director level, and experience delivering change management.

Responsibilities

• Manage Cyber & Information Policy and Cyber & Information Security Standards updates in line with refresh cycles.
• Modernise the policy and standards suite, including simple policy formats.
• Act as primary policy contact for BAU and project work.
• Support reporting on Policy Owner compliance and policy effectiveness.
• Conduct horizon-scanning to identify emerging risks and regulatory changes.
• Develop requirements for a self-service policy model for low-risk projects within risk appetite.
• Manage and modernise the Policy Waiver process.
• Provide policy guidance to investigation teams and HR on policy requirements.

Skills

Policy design

ISO 27001

NIST/CIS Controls

Job description

Financial Conduct Authority is seeking a Cyber Policy Lead within the Cyber and Information Resilience function. The role focuses on managing the Cyber & Information Policy Framework, updates to standards, and guidance to ensure effective governance and regulatory alignment across the FCA.

You will support risk reporting, horizon scanning for emerging risks, and collaboration with the CISO and GHR for non-compliance insights. A strong policy background and stakeholder management are essential.