Overview
As a Cyber Security Policy & Standards Consultant, you will play a critical role in enhancing the security framework of a UK financial services organization. You will assess and update cyber security standards, collaborating with multiple specialist teams to translate complex technical input into accessible, actionable requirements that influence daily decision-making. Your expertise will help define how the organization approaches security, manage exceptions, and integrate controls into new projects.
Responsibilities
- Assess existing cyber security standards to identify gaps and outdated requirements.
- Prioritize revisions based on renewal deadlines and necessary depth of review.
- Collaborate with technical owners to validate requirements in areas such as firewalls and Privileged Access Management (PAM).
- Translate technical assessments into clear, consistent policies and supporting documentation.
- Coordinate feedback and facilitate the review and approval process for revised standards.
- Manage cross-team dependencies and clarify outstanding decisions to keep projects on track.
Requirements
- Demonstrable experience in reviewing and delivering cyber security policies and technical standards in complex organizations.
- Strong knowledge of cyber security frameworks including ISO 27001, NIST CSF, and CIS Controls.
- Ability to challenge existing policies and reconcile different technical perspectives.
- Proven skills in policy writing combined with practical experience in executing standards reviews to completion.