Job Description:

Cyber Security Policy Authoring Specialist - SC Cleared

We are looking for an experienced Cyber Security Policy Authoring Specialist to support a major UK infrastructure programme.

You will review, develop and maintain cyber security policies, standards, procedures and supporting documentation, ensuring alignment with the Network and Information Systems (NIS) Regulations 2018, relevant control frameworks and organisational governance requirements.

Due to the nature of the role, active SC is required.

Key Responsibilities

• Author and update cyber security policies, standards and procedures.
• Review existing documentation and identify gaps, duplication and inconsistencies.
• Map policy requirements to relevant regulatory and security controls.
• Develop documentation covering areas such as BYOD, mobile device security, access control, acceptable use, data handling, remote working and third-party security.
• Translate technical, regulatory and risk requirements into clear, practical documentation.
• Work with security, architecture, engineering, risk and operational stakeholders.
• Maintain document governance, version control, ownership and review cycles.
• Support assurance, audit and compliance activities.
• Produce policy gap analyses, control mappings and supporting evidence.

Essential Experience

• Strong experience authoring cyber security policies, standards and procedures.
• Practical knowledge of the UK NIS Regulations.
• Experience working with cyber security control frameworks.
• Previous experience developing BYOD or mobile security policies.
• Ability to create clear, structured and audit-ready documentation.
• Strong stakeholder management and workshop facilitation skills.
• Active SC clearance.

Desirable Experience

• Experience in critical national infrastructure, transport, defence or government environments.
• Understanding of operational technology or safety-critical environments.