Compliance Engineer

Overall purpose of the job:

Provide specific guidance on the operational implementation of controls to support compliance against the following:

• ISO 27001 – Security Management
• Cyber Assessment Framework (CAF)
• Network Information Systems (NIS)
• Center for Internet Security (CIS) Benchmarks
• IEC 62443

Key responsibilities for this job:

• Define and maintain operational policies, standards, and procedures for compliance against OT and IT security frameworks
• Provide technical compliance guidance to project and engineering teams during new builds and ongoing operations.
• Support the handover and implementation of compliance processes, procedures and controls within operational engineering teams, as part of service implementation or transition
• Map compliance framework objectives to technical controls within the scope of supported assets under contract.
• Ensure adherence to regulatory frameworks (e.g., CAF, ISO, CIS, IEC 62443).
• Ensure adherence to customer contractual compliance obligations.
• Coordinate audits and manage compliance reporting.
• Implement continuous monitoring processes for compliance and risk indicators.
• Provide regular customer aligned reports on compliance status.

Knowledge and experience required:

Strong knowledge of regulatory standards and industry frameworks, including:

• Center for Internet Security (CIS) benchmarking
• Network and Information Systems (NIS)
• National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF)
• ISO Standards – particularly ISO27001 (Information Security Management)
• IEC 62443 – especially risk management elements