Security Compliance Engineer

Osprey Engineering Solutions are currently hiring on behalf of a international company within the hydraulics industry. They are currently seeking a Security & Compliance Engineer to join their group IT Team.

In this role, you will help ensure that information security and compliance are not only documented but also implemented and operated globally. You will combine ISMS/compliance activities with hands-on security engineering, especially in the Microsoft / Entra environment. You will work closely with global IT colleagues, the Cyber Defence Center, and business stakeholders.

Responsibilities include:

• Support and continuously improve the ISMS, including compliance activities, audit preparation, evidence collection, risk tracking, and remediation follow-up.
• Translate security and compliance requirements into practical technical controls and verify their effectiveness.
• Implement and operate core security controls in the Microsoft / Entra environment, including MFA, Conditional Access, role-based access, privileged access practices, access reviews, endpoint security, and hardening.
• Coordinate operational security activities such as Cyber Defence Center investigations, vulnerability and patch management, incident response, backup/restore security, ransomware resilience, and restore-test evidence.
• Integrate security into IT operations, change/release processes, and service management, and report the security posture using relevant KPIs such as MFA coverage, device compliance, patch status, critical risks, and restore-test success.

Experience:

• Hands-on experience in IT security, M365/Entra administration, endpoint management, IT operations, or a comparable technical role.
• Good understanding of Microsoft security concepts, especially identity and access management, endpoint protection, and cloud security.
• Basic to solid understanding of ISO 27001 concepts such as risk-based controls, policies, evidence, and audit readiness.
• Technical knowledge in several areas such as IAM, endpoint security, secure access, vulnerability management, logging/SIEM, or backup/recovery.
• Proactive, structured, and pragmatic working style, with the ability to document clearly, communicate across IT and business, and follow topics through to closure.