Compliance Engineer

Vysiion Limited; Chippenham; On-site; GBP 60,000 - 90,000; Full time

Job summary

Vysiion Limited is seeking a compliance-focused professional to implement and maintain controls supporting ISO 27001, CAF, NIS, CIS benchmarks, and IEC 62443 across OT and IT environments in the UK.

The role involves guiding engineering teams, coordinating audits, and delivering customer-aligned reports on compliance status, with emphasis on continuous monitoring and regulatory adherence.

Qualifications

• Strong knowledge of CIS benchmarking and NIS requirements.
• Familiarity with CAF (NCSC) assessment framework.
• Experience with ISO27001 information security management.
• Understanding of IEC 62443 risk management elements.

Responsibilities

• Define and maintain policies, standards and procedures for security compliance.
• Provide technical compliance guidance to project and engineering teams.
• Support handover and implementation of compliance processes within operations teams.
• Map compliance objectives to technical controls for assets under contract.
• Ensure adherence to CAF, ISO, CIS and IEC 62443 frameworks and customer obligations.
• Coordinate audits and manage compliance reporting.
• Implement continuous monitoring for compliance and risk indicators.
• Provide regular customer-aligned compliance reports.

Skills

CIS Benchmarking

NIS Regulation

CAF Framework

ISO27001

IEC 62443 risk management

Job description

Provide specific guidance on the operational implementation of controls to support compliance against the following:

• ISO 27001 – Security Management
• Cyber Assessment Framework (CAF)
• Network Information Systems (NIS)
• Center for Internet Security (CIS) Benchmarks
• IEC 62443

Key responsibilities for this job:

• Define and maintain operational policies, standards, and procedures for compliance against OT and IT security frameworks
• Provide technical compliance guidance to project and engineering teams during new builds and ongoing operations.
• Support the handover and implementation of compliance processes, procedures and controls within operational engineering teams, as part of service implementation or transition
• Map compliance framework objectives to technical controls within the scope of supported assets under contract.
• Ensure adherence to regulatory frameworks (e.g., CAF, ISO, CIS, IEC 62443).
• Ensure adherence to customer contractual compliance obligations.
• Coordinate audits and manage compliance reporting.
• Implement continuous monitoring processes for compliance and risk indicators.
• Provide regular customer aligned reports on compliance status.

Knowledge and experience required:

Strong knowledge of regulatory standards and industry frameworks, including:

• Center for Internet Security (CIS) benchmarking
• Network and Information Systems (NIS)
• National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF)
• ISO Standards – particularly ISO27001 (Information Security Management)
• IEC 62443 – especially risk management elements