OT Compliance Manager

Bestman Solutions Ltd

Compliance Manager – Perm – Hybrid

We are working with a utility company in the search for a Compliance Manager to play a critical role in safeguarding the organisation’s cybersecurity posture.

The compliance manager will be crucial in making sure that a business complies with all relevant internal rules, laws, and regulations pertaining to critical national and infrastructure in this GRC (Governance, Risk, and Compliance) function. Developing, putting into action, and overseeing compliance strategies across several departments and business units will be your responsibility.

Key Responsibilities:

• Work together to create and manage thorough cybersecurity standards, guidelines, and protocols that are in line with industry frameworks such as NIST, ISO 27001, CIS, and the Cyber Assessment Framework (CAF).
• Create, put into place, and oversee a thorough compliance procedure to monitor and handle any violations of laws, security guidelines, and standards.
• Collaborate with business units to pinpoint the underlying reasons for non-compliance and offer practical suggestions for enhancement.
• Keep a close eye on compliance-related operations, spot trends, and suggest workable fixes.
• Produce informative management reports that give a clear picture of risk patterns by utilizing programs like PowerPoint and Microsoft Power BI.

Essential Qualifications:

• Expertise in a governance, risk, and compliance (GRC) security capacity.
• Solid understanding of cybersecurity controls and threats.
• Knowledge of industry security frameworks and standards, such as the CAF (Cyber Assessment Framework).
• Understanding of the fundamentals of information security.
• Outstanding English communication skills, both written and spoken, with a strong ability to influence others.
• Ability to use programs like PowerPoint and Microsoft Power BI to create expert management reports.
• Prior experience creating standards and procedures for security.
• shown independence and initiative in the workplace.
• It is advantageous to have knowledge of root cause analysis, controls testing, and GRC tools.

Additional Considerations:

• While this role is not primarily technical, the ability to collaborate closely with technical colleagues and grasp technical security concepts is highly desirable.
• Experience in utilities or other industrial CNI environments is a valuable asset but not strictly mandatory.