Senior Cyber Security Consultant (Policy & Regulatory)

We're looking for a Senior Cyber Security Policy Consultant to support the development and delivery of regulatory guidance for the UK's evolving load control regime. Working within a high-profile programme, you'll take ownership of complex policy and regulatory challenges, translating legislation, consultation outcomes and government policy into clear, practical and implementable guidance. This role sits at the intersection of cyber security, regulation, critical national infrastructure (CNI), and energy policy, making it ideal for someone who enjoys influencing complex national programmes and working closely with government stakeholders.

• Lead the review, refinement and finalisation of cyber security policy guidance for load controller regulation.
• Develop clear and authoritative guidance covering regulatory scope, compliance obligations and operational models.
• Translate legislation, consultation feedback and agreed policy decisions into practical implementation guidance.
• Review and align multiple guidance products ensuring consistency, traceability and regulatory coherence.
• Support the development of Cyber Assessment Framework (CAF) profiles and sector-specific overlay guidance.
• Define and document approaches for controller attribution, threshold calculations, aggregation methodologies and tier transitions.
• Work closely with policy, cyber security and regulatory stakeholders to resolve ambiguities and ensure alignment.
• Produce high-quality written outputs including guidance documents, policy papers, consultation responses and regulatory artefacts.
• Manage stakeholder engagement across government, regulators, industry representatives and delivery partners.
• Provide expert advice on cyber security regulation, NIS requirements and governance frameworks.
  
  Experience delivering cyber security policy, regulatory or governance programmes.
• Strong understanding of cyber security frameworks such as CAF, NIS Regulations, ISO27001 or equivalent.
• Experience working within government, public sector, critical national infrastructure or regulated industries.
• Ability to interpret legislation, policy positions and consultation outcomes and convert them into practical guidance.
• Excellent stakeholder engagement and workshop facilitation skills.
• Strong analytical and problem-solving capabilities.
• Exceptional written communication and document production skills.
• Experience managing complex workstreams with multiple dependencies.
Desirable Experience
• Energy, utilities or smart energy sector experience.
• Experience with regulatory frameworks and compliance regimes.
• Understanding of virtual power plants (VPPs), aggregators, distributed energy resources or load management services.
• Familiarity with Ofgem, DSIT, NCSC or wider UK cyber security policy initiatives.
• Consultancy experience delivering large-scale transformation or regulatory programmes.
This role will require you to have or be willing to go through Security Clearance. As part of the onboarding process candidates will be asked to complete a Baseline Personnel Security Standard; details of the evidence required to apply may be found on the government website Gov.UK. If you are unable to meet this and any associated criteria, then your employment may be delayed, or rejected . Details of this will be discussed with you at interview Methods is passionate about its people; we want our colleagues to develop the things they are good at and enjoy.

Since our establishment in 1990, Methods has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK. Our mission is to improve and safeguard public-facing services. We apply digital thinking to ensure the future of our public services is centered around our citizens. Our human touch sets us apart from other consultancies, system integrators and software houses - we have a customer-centric value system whereby we focus on delivering what is right for our clients. We passionately support our clients in the success of their projects while working collaboratively to share skill sets and solve problems. At Methods we have fun while working hard; we are not afraid of making mistakes and learning from them. Methods are experts in delivering secure, resilient cyber and information services - keeping systems and data safe. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks.


• Autonomy to develop and grow your skills and experience
• Be part of exciting project work that is making a difference in society
• Strong, inspiring and thought-provoking leadership
• A supportive and collaborative environment
Development - access to LinkedIn Learning, a management development programme, and training Wellness - 24/7 confidential employee assistance programme Social - office parties, breakfast Tuesdays, monthly pizza Thursdays, Thirsty Thursdays, and commitment to charitable causes Time Off - 25 days of annual leave a year, plus bank holidays, with the option to buy 10 extra days each year Volunteering - 2 paid days per year to volunteer in our local communities or within a charity organisation