Cyber Security Policy & Standards Consultant

Cyber Security Policy & Standards Consultant
£600 - 700 per day outside IR35
6 month contract
London / remote
You've reviewed and updated security standards before. You know how to assess existing content, challenge technical gaps and turn specialist input into clear, usable requirements.
Joining a UK financial services organisation, you'll help translate cyber risk into requirements that support everyday decisions. Your work will shape how teams approach security, manage exceptions and build controls into new projects.
You may come from a GRC, information security governance or security consultancy background, but must bring direct experience delivering technical security policy and standards reviews.
What you'll deliver
You'll work with an established standards suite, assessing where a targeted refresh is sufficient and where a deeper technical review is needed.
Your work will include:

• Assessing existing standards and identifying gaps, outdated requirements and areas needing clarification.
• Prioritising revisions against renewal deadlines and the depth of review required.
• Working with technical owners to validate requirements across areas including firewalls, Privileged Access Management (PAM) and access administration.
• Translating technical input into clear, consistent standards and supporting documentation.
• Coordinating feedback and progressing revised standards through review and approval.

You'll need to keep the work moving across several specialist teams, making dependencies and outstanding decisions clear.
The experience you'll need
You'll have a demonstrable track record of reviewing, updating and delivering cyber security policies and technical standards within complex organisations.
You should be comfortable explaining previous assignments: what you inherited, how you assessed it, who you worked with and what you delivered.
Broad cyber security knowledge is essential, supported by a working understanding of ISO 27001, NIST CSF and CIS Controls. You'll be confident challenging existing content and reconciling different technical perspectives.
This will suit someone who combines strong policy writing with the practical discipline to move a standards review through to completion.