(Contract) Technical Author/Policy Writer

• Working Arrangement: Central London (Hybrid - 1/2 Times Weekly)
• Rate: Circa 450 Inside IR35

Role Overview:

We are seeking an experienced Policy Writer/Technical Author to join our team. The ideal candidate will be responsible for creating, reviewing, and updating policies and documentation related to cybersecurity and operational resilience, particularly in compliance with the Digital Operational Resilience Act (DORA). This role requires close collaboration with cross-functional teams, key stakeholders, and subject matter experts to ensure alignment with regulatory requirements and industry best practices, particularly in the financial services sector.

Key Responsibilities:

• Develop, review, and update technical policies and documentation in line with cybersecurity standards and DORA. (Knowledge of DORA is preferred but not essential)
• Collaborate with cross-functional departments (eg, IT, Risk, Legal, Compliance) to gather insights and ensure policy accuracy.
• Conduct interviews with stakeholders to capture critical information and identify gaps in existing policies.
• Translate complex technical information into clear, concise, and actionable policies and guidelines.
• Ensure policies align with the latest regulatory standards and financial industry requirements.
• Maintain version control and manage documentation updates to reflect evolving regulations and industry trends.
• Provide expert input into policy implementation and help with auditing and compliance checks.
• Work closely with legal teams to ensure policies are legally sound and compliant.

Qualifications & Skills:

• Proven experience as a policy writer, technical author, Ideally within cybersecurity or financial institutions.
• Understanding of Digital Operational Resilience Act (DORA) or related regulatory frameworks.
• Ability to work with cross-functional teams and manage relationships with key stakeholders.
• Excellent interviewing and communication skills.
• Strong attention to detail and ability to translate technical jargon into user-friendly content.
• Familiarity with industry best practices in operational resilience, risk management, and cybersecurity.