Since our establishment in 1990, Methods has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK.
Our mission is to improve and safeguard public-facing services. We apply digital thinking to ensure the future of our public services is centered around our citizens.
Our human touch sets us apart from other consultancies, system integrators and software houses - we have a customer-centric value system whereby we focus on delivering what is right for our clients.
We passionately support our clients in the success of their projects while working collaboratively to share skill sets and solve problems. At Methods we have fun while working hard; we are not afraid of making mistakes and learning from them.
Methods are experts in delivering secure, resilient cyber and information services – keeping systems and data safe. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks.
We're looking for a Senior Cyber Security Policy Consultant to support the development and delivery of regulatory guidance for the UK's evolving load control regime. Working within a high-profile programme, you'll take ownership of complex policy and regulatory challenges, translating legislation, consultation outcomes and government policy into clear, practical and implementable guidance.
This role sits at the intersection of cyber security, regulation, critical national infrastructure (CNI), and energy policy , making it ideal for someone who enjoys influencing complex national programmes and working closely with government stakeholders.
Requirements
Lead the review, refinement and finalisation of cyber security policy guidance for load controller regulation.
Develop clear and authoritative guidance covering regulatory scope, compliance obligations and operational models.
Translate legislation, consultation feedback and agreed policy decisions into practical implementation guidance.
Review and align multiple guidance products ensuring consistency, traceability and regulatory coherence.
Support the development of Cyber Assessment Framework (CAF) profiles and sector-specific overlay guidance.
Define and document approaches for controller attribution, threshold calculations, aggregation methodologies and tier transitions.
Work closely with policy, cyber security and regulatory stakeholders to resolve ambiguities and ensure alignment.
Produce high-quality written outputs including guidance documents, policy papers, consultation responses and regulatory artefacts.
Manage stakeholder engagement across government, regulators, industry representatives and delivery partners.
Provide expert advice on cyber security regulation, NIS requirements and governance frameworks.
✅ What We're Looking For
Experience delivering cyber security policy, regulatory or governance programmes.
Strong understanding of cyber security frameworks such as CAF, NIS Regulations, ISO27001 or equivalent.
Experience working within government, public sector, critical national infrastructure or regulated industries.
Ability to interpret legislation, policy positions and consultation outcomes and convert them into practical guidance.
Excellent stakeholder engagement and workshop facilitation skills.
Strong analytical and problem-solving capabilities.
Exceptional written communication and document production skills.
Experience managing complex workstreams with multiple dependencies.
🌟 Desirable Experience
Energy, utilities or smart energy sector experience.
Experience with regulatory frameworks and compliance regimes.
Understanding of virtual power plants (VPPs), aggregators, distributed energy resources or load management services.
Familiarity with Ofgem, DSIT, NCSC or wider UK cyber security policy initiatives.
Consultancy experience delivering large-scale transformation or regulatory…