Job Description:

Turning complex security requirements into clear, practical standards is what makes cyber security effective. As a Cyber Security Policy & Standards Consultant, you'll take ownership of a major documentation refresh, ensuring requirements can be implemented, measured and tested across a UK financial services organisation.

You'll join an established function, working with technical specialists to challenge outdated requirements, close gaps and produce documentation that makes a genuine difference to how security controls are applied.

What’s in it for you

• £600–£700 per day, outside IR35
• Six-month contract with an established UK financial services organisation
• London/remote working arrangements
• Ownership of an existing NIST-aligned standards suite
• Opportunity to influence how controls are implemented and assessed
• Direct collaboration with technical specialists across multiple disciplines

Your responsibilities as Cyber Security Policy & Standards Consultant

• Review existing NIST-aligned documentation, identifying where updates or complete rewrites are required.
• Personally draft and redraft technical requirements, ensuring they are clear, practical and testable.
• Work with specialists across access management, cryptography, firewalls and Privileged Access Management (PAM).
• Challenge outdated requirements, resolve gaps and ensure documentation reflects current practices.
• Translate technical controls into requirements that support consistent implementation and compliance testing.
• Manage documents through stakeholder review and approval, delivering completed standards ready for adoption.

What we’re looking for in a Cyber Security Policy & Standards Consultant

• Proven experience personally authoring technical cyber standards from scratch, not simply reviewing or approving existing documents.
• A substantial background in security policy and standards development within complex organisations.
• Strong understanding of NIST frameworks and their application to practical security controls.
• Broad technical knowledge covering areas such as identity and access management, cryptography, network security and PAM.
• Experience working with technical specialists to define requirements and produce documentation that can be implemented and tested.

If you've personally written technical security standards and can take ownership of the process from initial assessment through to final approval, we'd like to hear from you. Apply today for this Cyber Security Policy & Standards Consultant contract.

Candidate Source Ltd is an advertising agency.  Once you have submitted your application it will be passed to the third party Recruiter who is responsible for processing your application. This will include holding and sharing your personal data, our legal basis for this is legitimate interest subject to your declared interest in a job. Our privacy policy can be found on our website and we can be contacted to confirm who your application has been forwarded to.