Service Compliance Engineer

Exponential-e

Founded in 2002, Exponential-e swiftly established itself as a UK Cloud, Connectivity and Communications pioneer. Throughout our history, a focus upon leveraging leading-edge technology to deliver profitable and innovative services to our clients and prospects has resulted in industry and peer recognition for our ground-breaking approach, a truly world-class ICT services company.

We’re a company of innovators who think big and achieve bigger! Our people are crucial to the continuing success of our company. From our CEO to our new Graduates, each of our people demonstrates our PRIDE principles which are at the core of everything we do.

Overall purpose of the job:

Reporting to the CNI Service Assurance and Orchestration Manager, the overall purpose of the role is to:

• Support regulatory compliance within the scope of Operational Technology (OT) and Information Technology (IT) support services provided by the Vysiion Critical National Infrastructure (CNI) Centre of Excellence (CoE)
• Provide specific guidance on the operational implementation of controls to support compliance against the following:
  • ISO 27001 - Security Management
  • Cyber Assessment Framework (CAF)
  • Network Information Systems (NIS)
  • Center for Internet Security (CIS) Benchmarks
  • IEC 62443

Key responsibilities for this job:

• Governance

• Define and maintain operational policies, standards, and procedures for compliance against OT and IT security frameworks
• Provide technical compliance guidance to project and engineering teams during new builds and ongoing operations.
• Support the handover and implementation of compliance processes, procedures and controls within operational engineering teams, as part of service implementation or transition

• Risk Management

• Identify, assess, and prioritise and compliance risks associated with new implementation projects and existing supported systems.
• Map compliance framework objectives to technical controls within the scope of supported assets under contract.
• Review and update controls based on regular assessment.

• Compliance

• Ensure adherence to regulatory frameworks (e.g., CAF, ISO, CIS, IEC 62443).
• Ensure adherence to customer contractual compliance obligations.
• Coordinate audits and manage compliance reporting.

• Control Framework

• Define technical compliance controls for projects and operational environments.
• Validate implementation of compliance controls during build phases and monitor effectiveness during support phases.

• Monitoring & Reporting

• Implement continuous monitoring processes for compliance and risk indicators.
• Provide regular customer aligned reports on compliance status.
• Any other fair and reasonable task or duty assigned to you by your manager, or other senior Vysiion or Exponential-e Ltd staff member

Knowledge and experience required: 

• Strong knowledge of regulatory standards and industry frameworks, including:
  • Center for Internet Security (CIS) benchmarking
  • Network and Information Systems (NIS)
  • National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF)
  • ISO Standards - particularly ISO27001 (Information Security Management)
  • IEC 62443 - especially risk management elements
• Expertise in risk assessment methodologies and compliance management tools.
• Excellent communication and stakeholder engagement skills.
• Experience of implementation/governance of technical compliance regimes in an operational context - ideally within an OT environment
• Working knowledge of some or all the following technology types:
  • Server operating systems
  • Networking
  • Firewalling
  • Virtualisation
  • Endpoint devices
  • Encryption
  • Anti-virus and malware
  • Vulnerability Management
  • Security information and event management (SIEM)
  • Intrusion Detection and Prevention systems (IDS and IPS)

Our People

Our people are what makes Exponential-e Group the company it is today. This year’s employee survey highlighted that 81% of employees who took the survey, would recommend a friend to work for our organisation.

Learning and development are fundamental parts of daily life at Exponential-e. From their first day at the company, everyone is provided ample opportunities to develop their skills and broaden their horizons, with our own L&D team running a range of bespoke courses, based on the latest innovations and challenges across the digital landscape.

Exponential-e Group is committed to providing equal opportunities in employment and treating all employees with respect and dignity. The company respects and values the diversity of its staff, striving to maintain an environment where there is opportunity for everyone to feel valued, their talents to be utilised and for both personal and organisational aspirations to be met. Every employee plays a vital role in helping to create an inclusive working environment by understanding and harnessing difference in a positive way.