Service Compliance Engineer - Security Engineer

Title: CNI Service Compliance Engineer | Critical Infrastructure & Cyber Compliance

Location: Chippenham, UK (Hybrid, 1-2 days in office)

Clearance: Active SC Clearance or SC eligible

About the role

We're hiring a CNI Service Compliance Engineer for a leading technology services organisation supporting Critical National Infrastructure environments. This role sits within a specialist Service Assurance function and focuses on ensuring Operational Technology (OT) and Information Technology (IT) services align with key cyber security and regulatory frameworks. This is a unique opportunity to work at the intersection of cyber security, governance, risk management, and operational engineering. You'll help translate complex compliance requirements into practical technical controls that protect critical systems and services.

What you'll do

• Define and maintain operational policies, standards, procedures, and compliance controls across OT and IT environments
• Provide technical compliance guidance to engineering and project teams during solution design, implementation, and service transition activities
• Identify, assess, and prioritise compliance and security risks across both new projects and existing operational environments
• Map regulatory and security framework requirements to technical controls and supported assets
• Support audits, compliance assessments, reporting activities, and continuous improvement initiatives
• Validate the implementation and effectiveness of compliance controls throughout delivery and operational support lifecycles
• Implement continuous compliance monitoring and provide regular customer-focused reporting on risk and compliance status

What we're looking for

• Active SC Clearance/SC eligibility
• Full UK Driving Licence Required
• Strong knowledge of cyber security and compliance frameworks including CAF, NIS, CIS Benchmarks, and IEC 62443
• Experience implementing or governing technical compliance programmes within operational environments
• Strong understanding of risk assessment methodologies and compliance management practices
• Excellent stakeholder management, communication, and technical documentation skills
• Experience working with technologies such as networking, firewalls, virtualisation, endpoint security, vulnerability management, SIEM, IDS/IPS, encryption, and server platforms
• Exposure to Operational Technology (OT), critical infrastructure, or highly regulated sectors is highly desirable

The setup

• Hybrid working environment
• Opportunity to work on nationally significant infrastructure and cyber security programmes
• Collaborative team focused on security, compliance, and operational excellence
• Exposure to industry-leading cyber security frameworks and critical infrastructure technologies

#J-18808-Ljbffr