Cybersecurity Policy & Regulations Manager

About the role

Our client is looking for a forward‑thinking Cybersecurity Policy & Regulations Manager to shape and lead enterprise‑wide compliance and security posture. You will own the development, governance and continuous improvement of cybersecurity policies, standards and controls, ensuring alignment with global frameworks and regulations.

Key responsibilities

• Lead the creation and maintenance of cybersecurity policy, standards and control frameworks.
• Ensure compliance with global regulations and industry standards such as NIST, ISO 27001, PCI DSS, GDPR/NIS2 and SOX.
• Manage internal and external audits, regulatory engagements and monitor regulatory changes.
• Advise IT, Security, Legal and Privacy stakeholders on risk, compliance and remediation strategies.
• Drive awareness, training and continuous‑improvement initiatives across the organisation.
• Track and report compliance metrics to senior leadership.

Required profile

• Minimum 6 years of experience in cybersecurity, compliance or audit.
• Strong knowledge of security frameworks and regulations (NIST, ISO 27001, PCI DSS, GDPR/NIS2, SOX, ITIL).
• Experience with IT controls, regulatory compliance and GRC tools.
• Excellent stakeholder management, analytical and communication skills.
• Relevant certifications such as CISA, CIA or CPA are preferred.

Required skills

• NIST framework
• ISO 27001
• PCI DSS
• GDPR / NIS2
• SOX
• ITIL
• IT controls
• GRC tools

What we offer

• Opportunity to join a global leader focused on sustainability, innovation and inclusion.
• Strong career development programmes and competitive rewards.
• Chance to shape cybersecurity strategy at scale.