Policy Researcher

This role is for 200 hours over the course of the assignment starting 01/11/2026 to 31/05/2027. This role can be worked remotely or Hybrid. Interview Date is expected for 30/10/2026 Duties and responsibilities We are seeking a Research Assistant to support a research and policy project exploring how national cyber security policy, guidance and frameworks are understood and implemented by UK SMEs.The project will examine the gap between cyber security policy and organisational practice, identifying the barriers and enabling factors that influence implementation. It will involve engagement with SMEs, qualitative data collection and analysis, and the development of evidence to inform policy recommendations and practical resources for businesses.  

1. Support the recruitment and coordination of SMEs participating in the research.
2. Assist with arranging and administering interviews and stakeholder engagement activities. 
3. Support the collection of qualitative research data through interviews and engagement with participating organisations.
4. Organise, manage and maintain research data and project evidence in accordance with University research and data protection requirements.
5. Support the transcription, coding and analysis of qualitative research data. 6. Assist in identifying key themes relating to cyber security policy implementation, including leadership, governance, workforce capability, organisational capacity, cost, procurement and access to trusted support.
6. Undertake relevant desk research relating to cyber security policy, organisational cyber resilience and SME implementation challenges.
7. Support the collation and synthesis of evidence across participating SMEs.
8. Assist with the preparation of research summaries, evidence tables and material for policy and stakeholder engagement activities.
9. Support the preparation and delivery of the policy co design roundtable and other project engagement activities.
10. Contribute to the development of project outputs, including the final evidence report, policy briefing and practical implementation resource for SMEs.
11. Provide general research support required for the successful delivery of the project.   Skills and experience -Ideally a PhD candidate, postgraduate researcher or postgraduate student with research experience in cyber security, information systems, business, organisational resilience, policy or a related field. -Experience in qualitative research methods, including interviews, coding or thematic analysis. -Strong research and analytical skills with the ability to identify and interpret themes across qualitative evidence. -Experience in research data collection, organisation and management. -Strong report writing and research communication skills. -Ability to undertake desk research and synthesise evidence from different sources. -Ability to engage professionally with SMEs and external stakeholders. -Good organisational skills and the ability to manage research activities and deadlines. -Excellent written and verbal communication skills. -Ability to work independently while contributing effectively to a wider research project.

• -Knowledge of cyber security policy, organisational cyber resilience or SME cyber security would be desirable.