Senior Cyber Security Consultant (Policy & Regulatory)
The full posting
Since our establishment in 1990, Methods has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK.
Our mission is to improve and safeguard public-facing services. We apply digital thinking to ensure the future of our public services is centered around our citizens.
Our human touch sets us apart from other consultancies, system integrators and software houses - we have a customer-centric value system whereby we focus on delivering what is right for our clients.
We passionately support our clients in the success of their projects while working collaboratively to share skill sets and solve problems. At Methods we have fun while working hard; we are not afraid of making mistakes and learning from them.
Methods are experts in delivering secure, resilient cyber and information services – keeping systems and data safe. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks.
We're looking for a Senior Cyber Security Policy Consultant to support the development and delivery of regulatory guidance for the UK's evolving load control regime. Working within a high-profile programme, you'll take ownership of complex policy and regulatory challenges, translating legislation, consultation outcomes and government policy into clear, practical and implementable guidance.
This role sits at the intersection of cyber security, regulation, critical national infrastructure (CNI), and energy policy, making it ideal for someone who enjoys influencing complex national programmes and working closely with government stakeholders.
Requirements
- Lead the review, refinement and finalisation of cyber security policy guidance for load controller regulation.
- Develop clear and authoritative guidance covering regulatory scope, compliance obligations and operational models.
- Translate legislation, consultation feedback and agreed policy decisions into practical implementation guidance.
- Review and align multiple guidance products ensuring consistency, traceability and regulatory coherence.
- Support the development of Cyber Assessment Framework (CAF) profiles and sector-specific overlay guidance.
- Define and document approaches for controller attribution, threshold calculations, aggregation methodologies and tier transitions.
- Work closely with policy, cyber security and regulatory stakeholders to resolve ambiguities and ensure alignment.
- Produce high-quality written outputs including guidance documents, policy papers, consultation responses and regulatory artefacts.
- Manage stakeholder engagement across government, regulators, industry representatives and delivery partners.
- Provide expert advice on cyber security regulation, NIS requirements and governance frameworks.
✅ What We're Looking For
- Experience delivering cyber security policy, regulatory or governance programmes.
- Strong understanding of cyber security frameworks such as CAF, NIS Regulations, ISO27001 or equivalent.
- Experience working within government, public sector, critical national infrastructure or regulated industries.
- Ability to interpret legislation, policy positions and consultation outcomes and convert them into practical guidance.
- Excellent stakeholder engagement and workshop facilitation skills.
- Strong analytical and problem-solving capabilities.
- Exceptional written communication and document production skills.
- Experience managing complex workstreams with multiple dependencies.
🌟 Desirable Experience
- Energy, utilities or smart energy sector experience.
- Experience with regulatory frameworks and compliance regimes.
- Understanding of virtual power plants (VPPs), aggregators, distributed energy resources or load management services.
- Familiarity with Ofgem, DSIT, NCSC or wider UK cyber security policy initiatives.
- Consultancy experience delivering large-scale transformation or regulatory programmes.
This role will require you to have or be willing to go through Security Clearance. As part of the onboarding process candidates will be asked to complete a Baseline Personnel Security Standard; details of the evidence required to apply may be found on the government website Gov.UK. If you are unable to meet this and any associated criteria, then your employment may be delayed, or rejected . Details of this will be discussed with you at interview
By joining us you can expect
- Autonomy to develop and grow your skills and experience
- Be part of exciting project work that is making a difference in society
- Strong, inspiring and thought-provoking leadership
- A supportive and collaborative environment
Development – access to LinkedIn Learning, a management development programme, and training
Wellness – 24/7 confidential employee assistance programme
Social – office parties, breakfast Tuesdays, monthly pizza Thursdays, Thirsty Thursdays, and commitment to charitable causes
Time Off – 25 days of annual leave a year, plus bank holidays, with the option to buy 10 extra days each year
Volunteering – 2 paid days per year to volunteer in our local communities or within a charity organisation
Pension – Salary Exchange Scheme with 4% employer contribution and 5% employee contribution
Life Assurance – of 4 times base salary
Private Medical Insurance – which is non-contributory (spouse and dependants included)
Worldwide Travel Insurance – which is non-contributory (spouse and dependants included)
Enhanced Maternity and Paternity Pay
Travel– season ticket loan, cycle to work scheme
For a full list of benefits please visit our website ( www.methods.co.uk/careers/benefits )
Text as Methods published it; last compared with the original on 14 Nov 2026.
The application
Your details and CV, then 10 questions (3 written).
- 1.Salary expectationNumber
- 2.EducationShort answer · optional
- 3.ExperienceShort answer · optional
- 4.SummaryWritten answer
- 5.Have you had any extended periods of travel over 3 months in the last 5 years? If yes, please provide further details: Dates, location, reason for travelWritten answer
- 6.Have you travelled outside of the UK for more than 28 days in the last 12 months? If yes, please ask for further details: Dates, location, reason for travelWritten answer
- 7.Do you have dual nationality or any former nationalities OR foreign identity cards?Short answer · optional
- 8.If you are a naturalised UK citizen can you evidence that your former nationality or citizenship has been formally renounced?Choose one: 470781 · 470782 · 470783 · optional
- 9.Are you willing to go through the vetting process for SC?Choose any: 470784 · 470785
- 10.Have you lived in the UK for the last 5 years?Yes or no
Taken from Methods's application form as it stood on 14 Nov 2026.
The employer: Methods
Methods helps UK government bodies modernise public services; its cyber practice is hiring architects, identity specialists, DevSecOps engineers and a SOC analyst.
Pay and benefits: Consulting staff roles delivering security work on UK public sector client programmes.
Other security roles worth a look
A few links on CyberJobs.cc are referral links: when one leads to a hire, a sign-up or a purchase (a lab, a course or a tool marked Partner), the company behind it may pay CyberJobs.cc a fee. You pay nothing extra, and it never changes the salary an employer offers you or which roles the board lists. Roles from partners who pay us a fee rank a little higher in this list.


Cyber Threat Intelligence SME (shows the role here)
micro1 · Threat Intel & Research · Remote· 3w agoDetails
$70–$110/hr
$160,000–$225,000/yr
$120,000–$220,000/yr
Information Security Analyst Expert (shows the role here)
AfterQuery · SecOps & IR · Remote· 2mo agoDetails
$113/hr
Designed security for a whole company before?
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when Methods posts a security role
We read Methods's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.