Job title: Cyber Policy Lead
Division: Operations
Department: Cyber and Information Resilience
Salary: National (Edinburgh and Leeds) ranging from £53,800 to £70,000 and London from £59,200 to £75,000 (salary offered will be based on skills and experience)
This role is graded as: Senior Associate - Regulatory
Your external recruitment contact is Raimonda via Raimonda.Stankute@fca.org.uk
Your internal recruitment contact is Patrycja Patrycja.Matachowska@fca.org.uk
Applications must be submitted through our online portal. Applications sent via social media or email will not be accepted.
About the FCA and team
We regulate financial services firms in the UK, to keep financial markets fair, thriving and effective. By joining us, you’ll play a key part in protecting consumers, driving economic growth and shaping the future of UK finance services.
The Cyber and Operational Resilience directorate enables secure and resilient regulation across the FCA and PSR, supporting the protection of UK consumers and financial markets.
This Senior Associate sits within the Policy & Risk team, part of the wider Governance and Human Risk function. The role focuses on the management and maintenance of the Cyber & Information Resilience Policy Framework, including associated standards, procedures and guidance. You will help to support and articulate the organisations Cyber Risk Appetite through the policy framework. You will also be a key point of contact from all areas of the FCA for queries against published requirements.
You will support the Risk lead in setting and measuring controls performance and support the GHR Manager and CISO in reporting against cyber issues / non-compliance across the organisation.
Role responsibilities
Manage Cyber & Information Policy and Cyber & Information Security Standards updates in line with agreed refresh periods
Look to modernise our policy & standards suite e.g. standards on a page
Act as the primary point of contact for policy-related queries, covering both BAU and project-related activities
Support reporting on Policy Owner compliance e.g. effectiveness of our policies
Conduct policy gap analysis and provide recommendations for improvement
Complete and interpret regular horizon-scanning activities to identify emerging risks, trends, and regulatory changes
Help develop and build requirements for a new self-service policy model for low-risk projects taking into account the FCA’s risk appetite
Manage and modernise the Policy Waiver process
Provide policy guidance and interpretation to specialist investigation teams and HR on policy requirements and specific cases
Skills required
Minimum:
Experience in designing, drafting and maintaining cyber & information security policies, standards and procedures across their full lifecycle
Extensive working knowledge of industry standards such as ISO 27001, NIST Cybersecurity Framework (CIS), CIS Controls
Essential:
Understanding of technical security controls, including network security, cloud security, identity and access management and vulnerability management
Working knowledge of Information Management practices and Data Privacy legislation
Demonstrated experience in dealing with stakeholders at all levels (including Director level)
Solid experience in delivering organisational change
Risk identification, articulation and management
Benefits
25 days annual leave plus bank holidays
Non-contributory pension (8–12% depending on age) and life assurance at eight times your salary
Private healthcare with Bupa, income protection and 24/7 Employee Assistance
35 hours of paid volunteering annually
Colleagues spend a minimum of 50% of their working time in the office each month (60% for Directors and Executive Directors) across our London, Leeds and Edinburgh offices. A flexible benefits scheme designed around your lifestyle
A flexible benefits scheme designed around your lifestyle
For a full list of our benefits and our recruitment process as a whole visit our benefits page .
Our…