Cyber Security Policy And Standards Lead

Salt's Civil Service client are seeking a dynamic and experienced professional to join our team as the Cyber SecurityPolicy and Standards Lead. In this pivotal role, you will be responsible for leading and taking a hands-on approach to delivering Cyber Security policies, standards, and guidance across the organisation.

£475 inside IR35.

Initial contract till July 31st 24.

One day a month onsite in Devon

*Please only apply if you're holding an active SC Clearance*

Policy Development and Implementation:

Lead the development, implementation, and communication of comprehensive Cyber Security policies, standards, and guidelines.

Take a hands-on role in crafting policies that align with industry best practices (NIST CSF, NCSC CAF, CIS), legal requirements, and business needs.

Standards and Guidance:

Establish and maintain a set of Cyber Security standards and guidance documents that provide clear direction for the implementation of security controls and measures

Collaboration:

Collaborate with internal stakeholders to understand business needs and integrate Cyber Security policies seamlessly into operational processes.

Provide expert guidance to various departments, fostering a culture of security awareness and compliance.

Continuous Improvement:

Stay abreast of industry trends, emerging threats, and regulatory changes to continuously enhance and update Cyber Security policies and Standards.

Conduct regular assessments to identify gaps and opportunities for improvement in our cybersecurity posture.

Mentoring:

Provide mentorship and training to junior risk managers in relation to developing robust Cyber Security Policy sets.

Qualifications and Requirements:

Proven experience in leading the development and implementation of cybersecurity policies and Standards.

Strong technical background in cybersecurity with a hands-on approach to policy implementation.

Excellent communication and interpersonal skills to effectively engage with stakeholders at all levels.

In-depth knowledge of industry regulations, best practices, and emerging threats.

Relevant certifications such as CISSP, CISM, or equivalent are highly desirable.