Cybersecurity Policy & Regulations Manager

About the role

We are looking for a forward‑thinking Cybersecurity Policy & Regulations Manager to shape and lead our enterprise‑wide compliance and security posture. You will own the development, governance and continuous improvement of cybersecurity policies, standards and controls.

Key responsibilities

• Lead the creation and maintenance of cybersecurity policy, standards and control frameworks aligned with NIST, ISO 27001, PCI DSS, GDPR/NIS2 and other relevant regulations.
• Ensure ongoing compliance with global regulations and industry standards across the organisation.
• Manage internal and external audits, regulatory engagements and monitor regulatory changes.
• Advise IT, Security, Legal and Privacy stakeholders on risk, compliance and remediation strategies.
• Drive awareness, training and continuous‑improvement initiatives for a risk‑aware culture.
• Track, analyse and report compliance metrics to senior leadership.

Required profile

• Minimum 6 years experience in cybersecurity, compliance or audit.
• Strong knowledge of frameworks such as NIST, ISO 27001, SOX and ITIL.
• Hands‑on experience with IT controls, regulatory compliance and GRC tools.
• Excellent stakeholder management, analytical and communication skills.
• Relevant certifications (CISA, CIA, CPA) preferred.

Required skills

• NIST framework
• ISO 27001
• SOX
• ITIL
• PCI DSS
• GDPR / NIS2
• GRC tools

What we offer

• Opportunity to join a global leader focused on sustainability, innovation and inclusion.
• Strong career development programmes and competitive rewards.
• Chance to shape cybersecurity strategy at scale.