Information Security Consultant - Policies & Standards

Barclay Simpson
Sheffield
1 week ago
Create job alert

Information Security Policies, Standards and Regulatory Compliance Consultant required for market leading financial services firm. The role is focused on development, implementation, and continuous improvement of security policies, regulatory compliance, and standards across the organization. This role requires a deep understanding of security governance, industry standards, regulatory frameworks, and risk management to ensure the organization's information security posture remains robust and compliant with all regulations.


Duties:

  • Author group company polices and produce documents
  • Lead the development, implementation, and maintenance of information security policies, standards, and guidelines to address evolving security risks and compliance requirements.
  • Ensure security policies are comprehensive, consistent, and aligned with organizational objectives, regulatory mandates (eg, NIST, ISO 27001, GDPR, HIPPA etc), and other industry best practices.
  • Establish clear processes for periodic review, update, and approval of security policies.
  • Advise on and ensure compliance with relevant security frameworks and regulatory requirements (eg, NIST, SOC 2, PCI DSS, ISO 27001) for the entire organization.
  • Provide subject matter expertise to help identify, assess, and mitigate information security risks.
  • Coordinate with audit and risk management teams to ensure security policies and standards are being followed and risks are properly mitigated.
  • Design and implement governance structures to monitor, enforce, and ensure adherence to security policies and standards across the organization.
  • Develop and maintain a security metrics framework to evaluate the effectiveness of information security policies, standards, and procedures.
  • Serve as a key stakeholder in organizational risk assessments, vulnerability management, and incident response planning.
  • Collaborate closely with internal teams, including IT, legal, compliance, and business leaders, to ensure the successful adoption and execution of information security policies and standards.
  • Lead and facilitate security policy training, awareness programs, and workshops across the organization to drive a strong security culture.
  • Act as a trusted advisor to senior management, providing expert recommendations on security governance, policy issues, and risk management strategies.
  • Stay current on emerging threats, security technologies, and regulatory changes to proactively adapt policies and standards to maintain best-in-class security practices.
  • Lead efforts to continuously improve the organization's information security posture through policy enhancements and process optimization.
  • Publish thought leadership content, and represent the organization at industry conferences, forums, and working groups.


As an ideal candidate, you will have an industry certification such as CISSP, CISM or CRISC. You will also have a proven track record of delivery in a similar role. Financial services experience is highly advantageous.

Related Jobs

View all jobs

Information Security Consultant - Policies & Standards

IT Information Security Consultant

Information Security Manager

Regional Security Analyst ( up to 80K plus bonus )

Regional Security Analyst ( up to 80K plus bonus )

GRC Senior Security Consultant

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Global vs. Local: Comparing the UK Cybersecurity Job Market to International Landscapes

Understanding opportunities, salaries, and work culture in cybersecurity across the UK, the US, Europe, and Asia Cybersecurity has rapidly ascended from a back-office concern to a strategic priority for every industry. As data breaches, ransomware, and nation-state attacks increase in frequency and sophistication, organisations worldwide are racing to fortify their digital defences. This ongoing surge in cyber threats fuels an unprecedented demand for skilled security professionals—ranging from penetration testers and threat intelligence analysts to cloud security architects and CISOs. In this article, we’ll explore how the UK cybersecurity job market compares to major international hubs in the United States, Europe, and Asia. We’ll discuss job opportunities, salary bands, work culture, and provide guidance for those who might be contemplating remote or overseas positions. By understanding the nuances of each region’s cybersecurity ecosystem, you can make a more informed decision about where and how to advance your career in this high-impact, fast-evolving sector. Whether you’re a seasoned expert with years of experience or a career-changer eager to break into cybersecurity, this overview will help you navigate the global landscape. By the end, you’ll have a clearer perspective on each region’s advantages and challenges—along with practical insights for seizing the best opportunities in a field that has become mission-critical for every modern organisation.

Cybersecurity Leadership for Managers: Strategies to Motivate, Mentor, and Set Realistic Goals in Threat-Driven Environments

In an era of rapidly increasing data breaches, ransomware attacks, and corporate espionage, the importance of robust cybersecurity cannot be overstated. Protecting digital assets has become as essential as safeguarding physical resources, and organisations worldwide rely heavily on specialised teams to defend against sophisticated cyber threats. However, even the most advanced tools and techniques are only as effective as the leadership guiding their use. Cybersecurity leadership requires a dynamic blend of technical know-how, strategic thinking, and people-management skills to maintain readiness against ever-evolving threats. This article is designed for professionals aiming to lead cybersecurity teams or transition into managerial roles where understanding how to motivate, mentor, and set realistic goals is paramount. With insights into building high-performing teams, fostering collaboration, and embracing continuous learning, you’ll be equipped to protect your organisation from a broad spectrum of cyber risks.

10 Must-Read Cyber Security Books for UK Professionals: Boost Your Career and Stay Ahead of Threats

With rapid advancements in digital infrastructure, cloud computing, and the Internet of Things (IoT), cyber threats continue to evolve at lightning speed. For organisations across the UK—and globally—robust cyber security is no longer optional: It’s a strategic imperative. From healthcare and finance to government agencies and tech start-ups, every sector needs skilled professionals to safeguard critical data and protect users. If you’re looking to break into or advance within the cyber security industry, staying updated on the latest techniques, threat landscapes, and defence strategies is paramount. One of the best ways to build and sharpen your expertise is by reading authoritative, high-quality books that combine foundational knowledge with cutting-edge insights. In this guide, we’ve compiled a list of ten books that cater to various skill levels, spanning ethical hacking and threat intelligence to secure software development and cryptography. By diving into these resources, you’ll fortify your understanding of cyber security fundamentals, explore hands-on techniques for defending systems, and gain the strategic perspective needed to excel in roles throughout the UK’s thriving cyber security landscape.