Information & Cyber Policy Lead - Inside IR35 - SC Cleared

Information & Cyber Policy Lead - Inside IR35 - SC Cleared

The Information & Cyber Policy Lead will provide senior ownership of information security and cyber policy across a highly secure defence programme. The role combines strategic policy leadership with hands-on development and assurance, acting as the authority for how security policy is defined, interpreted and applied across the programme.

Operating at a head-of-function level in practice, this role ensures policy frameworks are aligned to defence standards, programme risk appetite and real-world delivery constraints within classified environments.

Key Responsibilities

• Own the end-to-end information and cyber security policy framework for the programme

• Set policy direction, standards and principles in line with defence security requirements

• Develop, maintain and review security policies, standards and supporting guidance

• Act as the senior point of authority for policy interpretation, waivers and exceptions

• Ensure policies are practical, implementable and aligned to operational realities

• Support assurance, audit and compliance activities across the programme

• Engage closely with cyber, engineering, assurance and programme leadership teams

• Drive continuous improvement of policy maturity, adoption and consistency

Required Experience & Capability

• Extensive experience in information and cyber security policy management

• Background operating at policy lead/head-of/senior manager level on secure or regulated programmes

• Strong understanding of risk-based security governance and assurance

• Experience aligning policy with complex technical and operational environments

• Proven ability to translate policy intent into actionable, delivery-focused guidance

• Comfortable operating as a senior authority with executives, assurance bodies and delivery teams

Security & Working Environment

• SC clearance required (minimum)

• Highly secure defence programme with classified assets and restricted environments

• Hybrid working: Reading site, 2-3 days per week on site (expensable)

Contract Summary

• Contract role, inside IR35, £500 - £600 p/d