Cyber Policy Lead

Division:
Operations

Department:
Cyber and Information Resilience

• Salary:
  National (Edinburgh and Leeds) ranging from £53,800 to £65,000 and London from £59,200 to £70,000 (salary offered will be based on skills and experience)
• This role is graded as:
  Senior Associate, Regulatory
• Your external recruitment contact is Raimonda via
• Your internal recruitment contact is Fizah via Fi
• Applications must be submitted through our online portal. Applications sent via social media or email will not be accepted.

We regulate financial services firms in the UK, to keep financial markets fair, thriving and effective. By joining us, you'll play a key part in protecting consumers, driving economic growth and shaping the future of UK finance services.

The Cyber and Operational Resilience directorate enables secure and resilient regulation across the FCA and PSR, supporting the protection of UK consumers and financial markets.

This Senior Associate sits within the Policy & Risk team, part of the wider Governance and Human Risk function. The role focuses on the management and maintenance of the Cyber & Information Resilience Policy Framework, including associated standards, procedures and guidance.

• Maintain and refresh the cyber policy framework by managing policy and standards updates in line with agreed review/refresh cycles and making out-of-cycle updates where material changes are required
• Modernise and simplify the policy & standard suite, exploring improved formats (e.g.,  standards on a page ) to increase usability and adoption across the organisation
• Serve as the FCA-wide point of contact for policy requirements, handling BAU and project-related queries and providing clear, consistent interpretations of published requirements
• Manage and track policy non-compliance and exceptions, including owning and modernising the Policy Waiver process and ensuring issues are surfaced and understood by relevant stakeholders
• Conduct policy gap analysis and horizon scanning, identifying emerging risks, regulatory/industry changes and required updates to keep the framework current and effective
• Support articulation of the organisation's Cyber Risk Appetite through the policy framework, ensuring requirements align to risk tolerance and are understood across the business
• Enable a new self-service policy model for low-risk projects, helping define requirements and controls that balance agility with the FCA’s risk appetite
• Provide reporting and governance support by assisting the