Technical Security & Compliance Lead (TSA)

Technical Security & Compliance Lead (TSA)

6 Month Contract initally£750-900 Inside IR35Reading or London Ideally - 2 Days Per Week

A leading UK telecommunications organisation is seeking an experienced Technical Security & Compliance Lead to support a major Telecom Security Act (TSA) compliance programme.

This role sits within a specialist team responsible for ensuring compliance with the Telecom Security Act and associated Codes of Practice, whilst supporting ongoing engagement with Ofcom and other regulatory stakeholders.

The successful contractor will help interpret regulatory requirements, assess compliance evidence, identify gaps, coordinate subject matter experts, and support the production of clear, accurate and defensible regulatory responses.

Key Responsibilities

* Interpret Telecom Security Act (TSA) requirements and Codes of Practice* Review regulatory requests and information enquiries from Ofcom* Assess controls, policies and evidence against regulatory requirements* Identify compliance gaps, risks and remediation activities* Work closely with technical SMEs, architects and operational teams to gather evidence* Draft, review and challenge regulatory responses* Translate technical information into regulator-facing documentation* Assess the operational, technical and commercial impact of compliance requirements* Support governance, assurance and risk management activities across the programme

Key Skills & Experience

* Strong knowledge of the Telecom Security Act (TSA)* Experience supporting regulatory compliance, assurance, governance or risk programmes* Experience responding to regulator enquiries, audits or compliance reviews* Understanding of security controls, risk management and assurance processes* Strong stakeholder management and communication skills* Ability to work with both technical and non-technical audiences

Desirable Experience

* Telecommunications sector experience* Experience engaging with Ofcom or similar regulators* Knowledge of ISO 27001, ISO 22301, Cyber Essentials or similar frameworks* Security, governance, risk or audit background