Cyber Security Engineer - Governance, Risk & Compliance - Remote

Cyber Security Engineer
- Governance Risk & Compliance (GRC) - UK Remote Immersive is hiring! Could you be our next Cyber Security Engineer?

Due to customer demand and increasing maturity within our platform we have an exciting and challenging opportunity for an experienced cyber professional within the cyber compliance sector - with expertise in conducting governance risk and compliance audits - to join our Product team as Cyber Security Engineer, specialising in Governance, Risk & Compliance (GRC).If successful you will join our Product team working closely with our Cyber Team Leads as we embark on this exciting new phase of product development within our market leading cyber resilience platform.

This isn’t an ordinary GRC role - we know everyone claims this and will tell you their role is super unique...but this one really is.

You are constantly researching, learning, totally geeking out on all things GRC related, from ISO standards, to the latest AI governance, and then taking that knowledge and creating labs and ranges.

You will be a key player in our Cyber team, shaping and influencing the roll out of our offensive security and AI pen test content roadmap, simulating attack paths and helping train our users to counter the latest threats.

You will be educating the world of GRC professionals on how to make sure they are secure in what they do. Now that is a pretty cool legacy to leave behind.

Your mission (if you choose to accept it) is to evolve and disrupt within the governance space by creating emulated environments within our platform that will simulate incidents within highly regulated sectors in an engaging and intuitive way for our community.

You will design, build and deliver practical and theory content to gamify governance, risk and compliance and make it engaging and fun for the end user. You'll shake up traditional training and teach complex concepts in an innovative way.

If you have a passion for cyber security, are experienced in the area of GRC, and want to disrupt how employees build their resilience against the latest threats we will appreciate your input and give you the space to innovate within our market leading platform, Immersive One.

Your main responsibilities (we're scaling fast, so these may change as we grow):

Utilising knowledge of Governance, Risk & Compliance to plan, write and improve our security labs, challenges and online learning content on the Immersive One platform.

Produce multi-format content utilising various teaching methods; practical exercises, questions & gamification around GRCPeer review cyber labs and ranges to ensure they function as expected

Research the latest GRC regulations and standard and compile this research to deliver practical and theory labs to users

Compile technical research into understandable concise content for both technical and non-technical audience

Act as a GRC subject matter expert for our engineering and product teams, embedding "security and privacy by design" principles into the SDLCSounds good? We’d love to hear from you if you have proven experience in the following areas:

A number of years of experience working within a heavily regulated industry (e.g., Fin Tech, Healthcare, or Government), cyber vendor or consultancy. You will have conducted audits and have an understanding of how GRC works in practice and helping companies to comply to these standard

In-depth knowledge of the MITRE ATLAS & D3

FEND frameworks and how it is used to help enterprises deal with threats to their organisation.

Deep understanding of common compliance frameworks and security standards (e.g., NIST SP 800-53, NIST CSF, ISO 27001/27002, SOC
2).Have a strong technical understanding of networking, computing and cyber security concepts

Have the ability…