ZKM Consulting
Cyber Security Risk & Policy Manager
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Role: Cyber Security Risk & Policy Manager
Type: 12 Month Contract (FTC)
Location: Remote (some travel to site)
Valid SC Clearance is required
Role Overview
Our client, a leading MSSP is seeking a Cyber Security Risk & Policy Manager to support one of their customers in overseeing the identification, assessment, and mitigation of cyber risks across the organisation. Acting as a bridge between technology, operations, compliance, and leadership, you will ensure cyber resilience aligns with regulatory requirements, business objectives, and organisational risk appetite.
Key Responsibilities
- Risk Management: Develop, implement, and manage the enterprise cyber security risk management framework and maintain the Cyber Security Risk Register across its lifecycle.
- Policy & Standards: Create, update, and align cyber security policies and standards with overall strategic business needs.
- Regulatory Compliance: Support internal/external audits and compliance deliverables under the Security of Network and Information Systems (NIS) Regulations and NCSC CAF.
- Stakeholder Engagement: Partner with IT, Digital, and Operational Technology (OT) teams to track risk mitigation programs, remove project bottlenecks, and embed security into system design.
- Metrics & Reporting: Design and monitor cyber security risk metrics and KPIs to report on risk exposure and program effectiveness.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Requirements
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Framework Expertise: Strong knowledge of recognised security standards and frameworks (e.g., ISO 27001, ISO 27005, NIST, CIS Controls, and NCSC CAF).
- Sector Experience: Proven experience performing cyber security risk assessments within regulated environments or CNI (e.g., Energy/Utilities, Finance, Healthcare).
- Technical Breadth: Strong background in core IT systems and architecture. Familiarity with operational technology (OT) or SCADA/ICS environments is highly desirable.
- Delivery & Governance: Background in tracking multi-stream work programs, navigating regulatory compliance, and managing cross-functional stakeholders under pressure.
- Qualifications: Relevant degree or professional certifications (e.g., CISM, CRISC, CISSP, ISO 27001 LA/LI) or equivalent practical experience.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location