Cyber Security Engineer – Governance, Risk & Compliance – Remote (UK Only)

Overview

In this role you will evolve governance, risk and compliance content for Immersive One, shaping emulated GRC environments and labs. You work with a cross-functional product and security team to educate professionals on regulatory standards and threat readiness. You’ll research frameworks, create engaging, multi-format training, and embed security-by-design into the platform. This is a chance to influence how organisations in regulated sectors build resilience against modern threats. You’ll join a fast-growing, values-driven team that prizes innovation, inclusion and customer impact.

Pay / Benefits

• 25 days annual leave + birthday off
• remote and flexible working
• enhanced parental leave
• private healthcare plan
• 7% matched pension
• professional development fund and Learn Anything fund

Responsibilities

• Plan, write and enhance security labs and learning content leveraging GRC knowledge.
• Create multi-format content with practical exercises, questions, and gamified GRC elements.
• Peer-review cyber labs and ranges to ensure correct functionality.
• Research latest GRC regulations and standards; translate findings into labs for users.
• Convert technical research into accessible content for technical and non-technical audiences.
• Act as GRC SME for engineering and product teams; promote security and privacy by design in SDLC.

Key requirements

• Experience in a heavily regulated industry (e.g., FinTech, Healthcare, Government) or with cyber vendor/consultancy.
• In-depth knowledge of MITRE ATLAS & D3FEND and their use in threat management.
• Strong understanding of key compliance frameworks (NIST SP 800-53, NIST CSF, ISO 27001/27002, SOC 2).
• Solid technical grasp of networking, computing and cybersecurity concepts.
• Ability to simplify complex subjects using examples and analogies for a training audience.
• Certifications such as CISSP, CISA, CRISC, CISM are useful but not essential.
• Problem-solving mindset and hands-on prototyping and iteration.

• Curiosity and continuous learning
• Clear communication for diverse audiences
• Collaborative and inclusive team player
• GRC knowledge and regulatory acumen
• MITRE ATLAS and D3FEND frameworks
• NIST SP 800-53, NIST CSF, ISO 27001/27002, SOC 2 familiarity

…