Cyber Security Engineer - Governance, Risk & Compliance - Remote (UK Only)

Immersive is hiring! Could you be our next Cyber Security Engineer?

Due to customer demand and increasing maturity within our platform we have an exciting and challenging opportunity for an experienced cyber professional within the cyber compliance sector - with expertise in conducting governance risk and compliance audits - to join our Product team as Cyber Security Engineer, specialising in Governance, Risk & Compliance (GRC).

If successful you will join our Product team working closely with our Cyber Team Leads as we embark on this exciting new phase of product development within our market leading cyber resilience platform.

This isn’t an ordinary GRC role - we know everyone claims this and will tell you their role is super unique…but this one really is.

You are constantly researching, learning, totally geeking out on all things GRC related, from ISO standards, to the latest AI governance, and then taking that knowledge and creating labs and ranges.

You will be a key player in our Cyber team, shaping and influencing the roll out of our offensive security and AI pen test content roadmap, simulating attack paths and helping train our users to counter the latest threats.

You will be educating the world of GRC professionals on how to make sure they are secure in what they do. Now that is a pretty cool legacy to leave behind.

Your mission (if you choose to accept it) is to evolve and disrupt within the governance space by creating emulated environments within our platform that will simulate incidents within highly regulated sectors in an engaging and intuitive way for our community.

You will design, build and deliver practical and theory content to gamify governance, risk and compliance and make it engaging and fun for the end user. You'll shake up traditional training and teach complex concepts in an innovative way.

If you have a passion for cyber security, are experienced in the area of GRC, and want to disrupt how employees build their resilience against the latest threats we will appreciate your input and give you the space to innovate within our market leading platform, Immersive One.

• →

  Utilising knowledge of Governance, Risk & Compliance to plan, write and improve our security labs, challenges and online learning content on the Immersive One platform.

• →

  Produce multi-format content utilising various teaching methods; practical exercises, questions & gamification around GRC

• →

  Peer review cyber labs and ranges to ensure they function as expected

• →

  Research the latest GRC regulations and standard and compile this research to deliver practical and theory labs to users

• →

  Compile technical research into understandable concise content for both technical and non-technical audience

• →

  Act as a GRC subject matter expert for our engineering and product teams, embedding "security and privacy by design" principles into the SDLC

• A number of years of experience working within a heavily regulated industry (e.g., FinTech, Healthcare, or Government), cyber vendor or consultancy. You will have conducted audits and have an understanding of how GRC works in practice and helping companies to comply to these standard

• In-depth knowledge of the MITRE ATLAS & D3FEND frameworks and how it is used to help enterprises deal with threats to their organisation.

• Deep understanding of common compliance frameworks and security standards (e.g., NIST SP 800-53, NIST CSF, ISO 27001/27002, SOC 2).

• Have a strong technical understanding of networking, computing and cyber security concepts

• Have the ability to use examples and analogies to simplify complex subjects - your content will train real world users to identify and combat the latest threats so you need to be able to inhabit the mindset of your target audience to create realistic simulations

• Certifications such as CISSP, CISA, CRISC, CISM would be useful to have but not essential

• Attitude and approach is just as important as technical skills for this role - you will be someone who enjoys tackling complex problems and finding the solution. You'll be a natural problem solver and 'tinkerer' who enjoys prototyping and iteration.