Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Cyber Policy Lead role.
Rezi rewrites your resume against Financial Conduct Authority's job description. Free.

Tailor your resume to this Cyber Policy Lead role.
Rezi rewrites your resume against Financial Conduct Authority's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Cyber Policy Lead posting at Financial Conduct Authority — free, in seconds.

Don't guess if your resume is good enough.
See how it scores against the Cyber Policy Lead posting at Financial Conduct Authority — free, in seconds.
About the Role
This Senior Associate role focuses on managing and maintaining the Cyber & Information Resilience Policy Framework, including associated standards, procedures, and guidance. You will support the organization's Cyber Risk Appetite and serve as a key point of contact for policy-related queries across the FCA.
Responsibilities
- Manage Cyber & Information Policy and Cyber & Information Security Standards updates in line with agreed refresh periods
- Modernize the policy & standards suite, e.g., standards on a page
- Act as the primary point of contact for policy-related queries, covering both BAU and project-related activities
- Support reporting on Policy Owner compliance, e.g., effectiveness of our policies
- Conduct policy gap analysis and provide recommendations for improvement
- Complete and interpret regular horizon-scanning activities to identify emerging risks, trends, and regulatory changes
- Help develop and build requirements for a new self-service policy model for low-risk projects taking into account the FCA’s risk appetite
- Manage and modernize the Policy Waiver process
- Provide policy guidance and interpretation to specialist investigation teams and HR on policy requirements and specific cases
Requirements
- Experience in designing, drafting and maintaining cyber & information security policies, standards and procedures across their full lifecycle
- Extensive working knowledge of industry standards such as ISO 27001, NIST Cybersecurity Framework (CIS), CIS Controls
- Understanding of technical security controls, including network security, cloud security, identity and access management and vulnerability management
- Working knowledge of Information Management practices and Data Privacy legislation
- Demonstrated experience in dealing with stakeholders at all levels (including Director level)
- Solid experience in delivering organisational change
- Risk identification, articulation and management
Skills
- ISO 27001
- NIST Cybersecurity Framework (CIS)
- CIS Controls
- Technical security controls
- Network security
- Cloud security
- Identity and access management
- Vulnerability management
- Information Management practices
- Data Privacy legislation
- Stakeholder management
- Organizational change delivery
- Risk identification
- Risk articulation
- Risk management
Location
- Edinburgh
- Leeds
- London
Work Type
- Hybrid
Experience Level
- Senior Associate
Salary/Compensations
- National (Edinburgh and Leeds) ranging from £53,800 to £70,000
- London from £59,200 to £75,000
Benefits
- 25 days annual leave plus bank holidays
- Non-contributory pension (8–12% depending on age)
- Life assurance at eight times your salary
- Private healthcare with Bupa
- Income protection
- 24/7 Employee Assistance
- 35 hours of paid volunteering annually
- Flexible benefits scheme designed around your lifestyle
About the Company
- We regulate financial services firms in the UK, to keep financial markets fair, thriving and effective.
- By joining us, you’ll play a key part in protecting consumers, driving economic growth and shaping the future of UK finance services.
- The Cyber and Operational Resilience directorate enables secure and resilient regulation across the FCA and PSR, supporting the protection of UK consumers and financial markets.
Equal Opportunity
- We are committed to fostering a diverse and inclusive culture: one that’s free from discrimination and bias, celebrates difference and supports colleagues to deliver at their best.
- We believe that our differences and similarities enable us to be a better organisation – one that makes better decisions, drives innovation and delivers better regulation.
- If you require any adjustments due to a disability or condition, your recruiter is here to help - reach out for tailored support.
- We welcome diverse working styles and aim to find flexible solutions that suit both the role and individual needs, including options like part-time and job sharing where applicable.
- We’re proud to be a Disability Confident Employer and therefore, people or individuals with disabilities and long-term conditions who best meet the minimum criteria for a role will go through to the next stage of the recruitment process.
- In cases of high application volumes we may progress applicants whose experience most closely matches the role’s key requirements.