Compliance Engineer

Who are CT?

CT is a forward-thinking IT support, Telecoms and Cloud service provider embarking on a journey to transition from a regional, single office business to a national, multi-location organisation. 

Our mission is to be the UK’s leading business technology partner to the SME market AND to be the UK’s premier provider of cloud data solutions. 

What is the role?

Compliance Engineer

As a Compliance Engineer, you will be responsible for ensuring that our customers information systems and technologies are compliant with Cyber Essentials standards. Further responsibilities will include understanding and applying regulatory standards, performing regular audits, maintaining relevant policies and procedures including being responsible for the technologies used to support these services.  

Key responsibilities will include:

Compliance 

• Act as CT’s subject matter expert for Cyber Essentials, guiding customers through required changes to achieve and maintain accreditation. 
• Must have a strong understanding of Cyber Essentials and how this relates to everyday working practices within an organisation. 
• Have background in working with organisations to implement changes required to achieve Cyber Essentials accreditation. 
• Have experience of working with the Microsoft 365 ecosystem, specifically Intune and Conditional Based Access (CBA) policies. 
• Implement and maintain technical and administrative controls required for customer compliance.  
• Perform regular compliance audits, providing clear reports, remediation guidance, and progress tracking. 
• Monitor customer systems to ensure compliance levels are upheld, including patching, configuration requirements, access controls, and policy enforcement.  
• Conduct vulnerability assessments focused on compliance‑impacting findings and work with teams to ensure timely remediation.  
• Stay up to date with Cyber Essentials, regulatory developments, and compliance‑related industry trends.  
• Act as the primary internal escalation point for compliance‑related questions and direction. 
• Develop compliance plans by researching, analysing, and applying appropriate compliance concepts, frameworks, and best‑practice approaches. 
• Undertake updates and upgrades to ensure compliance within the required timeframes. 
• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks. 

Operational & Cross-Team Responsibilities 

• Manage and prioritise a queue of compliance and service tickets. 
• Monitor system compliance and performance and identify potential issues before they become critical 
• Collaborate with IT colleagues and provide compliance‑focused guidance during escalations. 
• Mentor and support team members to raise compliance awareness and capability across CT.  
• Provide input into IT strategies and contribute to improvements that enhance compliance maturity.  
• Work with 3rd parties where necessary to resolve incidents or complete compliance‑related activities.  
• Contribute to major incident ownership where compliance or regulatory considerations apply, including input to RCA documentation. 

Skills & Experience:

The successful candidate should have: 

• Bachelor’s degree or equivalent experience in Cyber Security, Information Governance, or related field (E) 
• Strong understanding of Cyber Essentials and its application within organisations (E) 
• Significant experience with Microsoft 365 compliance‑related tooling: Intune, Conditional Access, MFA, configuration baselines (E) 
• Proven track record of helping organisations remediate and maintain environments to Cyber Essentials level (E) 
• Working knowledge of patch management (preferably ManageEngine) (E) 
• Understanding of firewalls, firmware updates, and configuration from a compliance perspective (E) 
• Ability to interpret regulatory requirements and translate into operational controls (E) 
• Strong documentation skills, including policy creation (E) 
• Ability to manage multiple tasks and workloads (E) 
• Excellent customer communication and stakeholder‑facing skills (E) 
• Commitment to staying current with compliance and governance developments (E) 
• Ability to deliver training and guidance to non‑technical and technical staff (E) 
• Leadership skills with experience in mentoring colleagues (D) 
• Familiarity with remote support tools and techniques (D) 
• Experience of working within an MSP (D) 
• Knowledge of ITIL or other IT service management frameworks (D) 

Benefits:

• Free onsite parking with EV charging points
• Air conditioned offices with shower facilities
• Career progression with personal development plans
• Training opportunities
• Vitality private healthcare plan
• Sick pay policy
• A large social hub to relax or enjoy a game of pool.
• Hybrid working – remote / customer site / office
• Weekly HIIT sessions provided by The Fitness Truck for those who want to challenge their body as well as their mind
• Regular mental health training programme available to all
• Last but not least, our office dogs

Please see our other vacancies here.