Cyber Security Engineer - Governance, Risk & Compliance (UK Only)

Immersive; United States; Remote; USD 93.000 - 146.000; Vollzeit

Benefits dieser Stelle

Time off

Remote working

25 days annual leave

Private healthcare

Pension

Learning fund

Zusammenfassung

Immersive is seeking a Cyber Security Engineer specializing in Governance, Risk & Compliance (GRC) to join the Product team, focusing on Immersive One labs and learning content. You will research regulations, develop practical GRC labs, and translate complex standards into engaging training for users worldwide.

You will evolve and disrupt governance content by creating emulated environments that simulate incidents in regulated sectors, delivering theory and hands-on labs while collaborating

Qualifikationen

• Experience in heavily regulated industries (FinTech, Healthcare, or Government) performing governance, risk and compliance work.
• Deep knowledge of MITRE ATLAS & D3FEND and how it helps enterprises defend against threats.
• Strong familiarity with common frameworks and standards (NIST SP 800-53, NIST CSF, ISO 27001/27002, SOC 2).
• Solid technical grounding in networking, computing and cybersecurity concepts.
• CISSP, CISA, CRISC or CISM certifications are a plus.

Aufgaben

• Plan, write and improve security labs, challenges and online learning content on the Immersive One platform using GRC knowledge.
• Create multi-format content with practical exercises, questions and gamified labs for GRC.
• Research latest GRC regulations and standards and translate into labs for users.
• Produce clear, concise technical content for both technical and non-technical audiences.
• Serve as a GRC SME for engineering and product teams, embedding security-by-design in SDLC.

Kenntnisse

GRC experience

Audit experience

Regulatory knowledge

Security standards

Threat modelling

Ausbildung

Bachelor's degree in related field

Tools

MITRE ATLAS & D3FEND

Jobbeschreibung

Описание: A platform you can believe in: Immersive One is the leading cyber resilience solution across the globe. Build and scale a best in class platform alongside a team of the brightest minds in cybersecurity! At Immersive, we’re uniquely positioned to future‑proof organizations against any cyber challenge. If that excites you, read on! Immersive is the cyber proving ground for the AI enterprise. Through Immersive One, organizations can test whether people, AI‑enabled workflows, cyber security teams, agents, and leaders can perform securely under realistic pressure, then turn that performance into evidence they can use to improve, benchmark, and report readiness. Trusted by 30%+ of the Fortune 100 and ranked #1 in the Forrester Wave™ 2026, Immersive helps organizations prove AI can be adopted safely, teams can develop and defend at AI speed, leaders can lead through crisis, and AI agents can be validated before they are trusted in live workflows https://www.immersivelabs.com/why-immersive-labs We help the world’s biggest brands like Citi, Pfizer, Humana, and HSBC, protect their revenues and brand reputations. Immersive was founded in 2017, from a cargo container in Bristol, UK we’ve grown to over 300 employees globally, announced funding of more than $180 million and been voted a Best place to work on multiple occasions! https://www.immersivelabs.com/company/our-story “The speed at which Immersive produces technical content is hugely impressive, and this turnaround has helped get our teams ahead of the curve, giving them hands‑on experience with serious vulnerabilities, in a secure environment, as soon as they emerge.” Head of Global Cybersecurity Operations, HSBC Cyber Security Engineer - Governance Risk & Compliance (GRC) - UK Remote Immersive is hiring! Could you be our next Cyber Security Engineer? Due to customer demand and increasing maturity within our platform we have an exciting and challenging opportunity for an experienced cyber professional within the cyber compliance sector - with expertise in conducting governance risk and compliance audits - to join our Product team as Cyber Security Engineer, specialising in Governance, Risk & Compliance (GRC).

This isn’t an ordinary GRC role - we know everyone claims this and will tell you their role is super unique…but this one really is. You are constantly researching, learning, totally geeking out on all things GRC related, from ISO standards, to the latest AI governance, and then taking that knowledge and creating labs and ranges. You will be a key player in our Cyber team, shaping and influencing the roll out of our offensive security and AI pen test content roadmap, simulating attack paths and helping train our users to counter the latest threats. You will be educating the world of GRC professionals on how to make sure they are secure in what they do. Now that is a pretty cool legacy to leave behind.

Your mission (if you choose to accept it) is to evolve and disrupt within the governance space by creating emulated environments within our platform that will simulate incidents within highly regulated sectors in an engaging and intuitive way for our community. You will design, build and deliver practical and theory content to gamify governance, risk and compliance and make it engaging and fun for the end user. You'll shake up traditional training and teach complex concepts in an innovative way. If you have a passion for cyber security, are experienced in the area of GRC, and want to disrupt how employees build their resilience against the latest threats we will appreciate your input and give you the space to innovate within our market leading platform, Immersive One.

Задачи

• Utilising knowledge of Governance, Risk & Compliance to plan, write and improve our security labs, challenges and online learning content on the Immersive One platform.
• Produce multi-format content utilising various teaching methods; practical exercises, questions & gamification around GRC Peer review cyber labs and ranges to ensure they function as expected.
• Research the latest GRC regulations and standard and compile this research to deliver practical and theory labs to users.
• Compile technical research into understandable concise content for both technical and non-technical audience.
• Act as a GRC subject matter expert for our engineering and product teams, embedding "security and privacy by design" principles into the SDLC.

Требования

• A number of years of experience working within a heavily regulated industry (e.g., FinTech, Healthcare, or Government), cyber vendor or consultancy. You will have conducted audits and have an understanding of how GRC works in practice and helping companies to comply to these standard
• In-depth knowledge of the MITRE ATLAS & D3FEND frameworks and how it is used to help enterprises deal with threats to their organisation.
• Deep understanding of common compliance frameworks and security standards (e.g., NIST SP 800-53, NIST CSF, ISO 27001/27002, SOC 2).
• Have a strong technical understanding of networking, computing and cyber security concepts.
• Have the ability to use examples and analogies to simplify complex subjects - your content will train real world users to identify and combat the latest threats so you need to be able to inhabit the mindset of your target audience to create realistic simulations.
• Certifications such as CISSP, CISA, CRISC, CISM would be useful to have but not essential.
• Attitude and approach is just as important as technical skills for this role - you will be someone who enjoys tackling complex problems and finding the solution.
• You’ll be a natural problem solver and 'tinkerer' who enjoys prototyping and iteration.
• Immersive’s growth has been fuelled by our values that underpin everything we do, here's how they relate to this role:

Our Values

• Driven - We push the boundaries of innovation, acting swiftly to achieve ambitious outcomes. Our drive embodies a culture of ambition, where challenges are stepping stones to excellence.
• Inclusive - Our strength lies in diversity, fostering a culture where every individual contributes to our collective strength. We champion open dialogue and empathy, ensuring a collaborative, inclusive workplace.
• Customer Centric - We seek to develop deep relationships with our customers to help them achieve their business outcomes. We exceed our customers and partners' expectations by crafting products, services and experiences that surprise, delight and ensure they feel valued and supported every day.
• One Team - We are a talented global team working together to achieve our vision. Central to our ethos, resilience means adapting and thriving in adversity. It guides our innovation, ensuring we and our clients are prepared for the future.
• We encourage people of all different backgrounds and identities to apply. We are committed to maintaining an inclusive, supportive place for you to be you and do your very best work.

Benefits

• Time off, flexible and remote working so you can work when is best for you, includes 25 days annual leave + 2 volunteering days and your birthday off. The longer you are with Immersive, the more holiday days you get, up to a maximum of 30 days after five years of service.
• Look after your family and yourself with enhanced parental leave, mindfulness groups, critical illness cover, 7% matched pension, private healthcare plan and more.
• Career and learning development through the platform, a dedicated professional development fund and our ‘Learn Anything’ fund - which enables you to learn anything that’s not work!
• Recognition & Rewards for doing great work and living our values and behaviours.
• Informal or formal flexible working options, e.g. flexible start and finish times, reduced hours.
• We have a vibrant team culture with team events throughout the year.
• Our socials have included everything from pottery painting and paper mask making, to dungeons and dragons!
• When you do visit the UK hub, getting there is easy: we’re based in the centre of Bristol, just a 10 minute walk from the train station. We also offer railcard loan and cycle scheme to buy a new bike.

Excited by the above? As well as an inclusive, supportive place for you to be you.