Service Compliance Engineer - Security Engineer

GCS; Chippenham; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

Job summary

GCS is hiring a CNI Service Compliance Engineer to support Critical National Infrastructure environments. The role sits in a specialist Service Assurance function and focuses on aligning OT and IT services with cyber security frameworks and regulatory requirements.

You will translate complex compliance needs into practical technical controls. You will work in a hybrid Chippenham environment, 1-2 days in office, supporting audits, risk assessments and continuous improvement across delivery

Qualifications

• Active SC Clearance or SC eligibility required.
• Full UK Driving Licence required.
• Knowledge of CAF, NIS, CIS Benchmarks, IEC 62443 and related compliance frameworks.
• Experience implementing or governing technical compliance programmes in OT/IT environments.
• Strong risk assessment and compliance management practices.

Responsibilities

• Define and maintain operational policies, standards, procedures and compliance controls across OT/IT environments.
• Provide technical compliance guidance to engineering and project teams during design, implementation and service transition.
• Identify, assess and prioritise compliance and security risks across new projects and existing operations.
• Map regulatory and security framework requirements to technical controls and assets.
• Support audits, assessments, reporting and continuous improvement initiatives.
• Validate implementation and effectiveness of compliance controls throughout delivery lifecycles.
• Implement continuous compliance monitoring and provide regular reporting on risk and compliance status.

Skills

SC Clearance

Driving Licence

Cyber security

NIS/CIS/IEC62443

Risk assessment

Stakeholder management

Technical documentation

Network security

OT/IT environments

SIEM/IDS/IPS

Job description

Title: CNI Service Compliance Engineer | Critical Infrastructure & Cyber Compliance

Location: Chippenham, UK (Hybrid, 1-2 days in office)

Clearance: Active SC Clearance or SC eligible

About the role

We're hiring a CNI Service Compliance Engineer for a leading technology services organisation supporting Critical National Infrastructure environments. This role sits within a specialist Service Assurance function and focuses on ensuring Operational Technology (OT) and Information Technology (IT) services align with key cyber security and regulatory frameworks. This is a unique opportunity to work at the intersection of cyber security, governance, risk management, and operational engineering. You'll help translate complex compliance requirements into practical technical controls that protect critical systems and services.

What you'll do

• Define and maintain operational policies, standards, procedures, and compliance controls across OT and IT environments
• Provide technical compliance guidance to engineering and project teams during solution design, implementation, and service transition activities
• Identify, assess, and prioritise compliance and security risks across both new projects and existing operational environments
• Map regulatory and security framework requirements to technical controls and supported assets
• Support audits, compliance assessments, reporting activities, and continuous improvement initiatives
• Validate the implementation and effectiveness of compliance controls throughout delivery and operational support lifecycles
• Implement continuous compliance monitoring and provide regular customer-focused reporting on risk and compliance status

What we're looking for

• Active SC Clearance/SC eligibility
• Full UK Driving Licence Required
• Strong knowledge of cyber security and compliance frameworks including CAF, NIS, CIS Benchmarks, and IEC 62443
• Experience implementing or governing technical compliance programmes within operational environments
• Strong understanding of risk assessment methodologies and compliance management practices
• Excellent stakeholder management, communication, and technical documentation skills
• Experience working with technologies such as networking, firewalls, virtualisation, endpoint security, vulnerability management, SIEM, IDS/IPS, encryption, and server platforms
• Exposure to Operational Technology (OT), critical infrastructure, or highly regulated sectors is highly desirable

The setup

• Hybrid working environment
• Opportunity to work on nationally significant infrastructure and cyber security programmes
• Collaborative team focused on security, compliance, and operational excellence
• Exposure to industry-leading cyber security frameworks and critical infrastructure technologies