Cyber Security Engineer – Governance, Risk & Compliance

Immersive Labs

. Plan, write, and improve security labs, challenges, and online learning content for the Immersive One platform .

Posted 10/13/2026full-timeRemote • United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Governance, Risk, and Compliance (GRC) content development, with a strong focus on creating engaging and educational materials for both technical and non-technical audiences. Proficient in applying security and privacy principles within the software development lifecycle and simulating real-world cyber threats in regulated environments.

Highest-signal resume keywords

Governance, Risk, And Compliance (GRC)MITRE ATLAS And D3FEND FrameworksNIST SP 800-53 And NIST CSFISO 27001/27002 And SOC 2Cybersecurity Concepts

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Content DevelopmentCyber Lab DesignTechnical ResearchCompliance FrameworksSecurity StandardsAuditingGamification TechniquesIncident SimulationSecurity By Design PrinciplesNetworking Concepts

Soft Skills

CommunicationSimplifying Complex SubjectsPeer ReviewInfluencing Content RoadmapCollaboration

Certifications & Qualifications

CISSPCISACRISCCISM

Industry Keywords

Heavily Regulated IndustryCyber VendorConsultancyCybersecurityOffensive SecurityAI Penetration TestingEmulated EnvironmentsResearch CompilationPractical ExercisesUser Training

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Plan, write, and improve security labs, challenges, and online learning content for the Immersive One platform
Produce multi-format GRC content using practical exercises, questions, and gamification
Peer review cyber labs and ranges to ensure they function as expected
Research the latest GRC regulations and standards
Compile research into practical and theory labs for users
Turn technical research into concise, understandable content for technical and non-technical audiences
Act as a GRC subject matter expert for engineering and product teams
Embed security and privacy by design principles into the software development lifecycle
Shape and influence the offensive security and AI penetration-testing content roadmap
Simulate attack paths and help train users to counter the latest threats
Create emulated environments that simulate incidents in highly regulated sectors
Design, build, and deliver engaging governance, risk, and compliance content

Requirements

What you’ll need

A number of years of experience working within a heavily regulated industry, cyber vendor, or consultancy
Experience conducting audits and understanding how GRC works in practice
In-depth knowledge of the MITRE ATLAS and D3FEND frameworks
Deep understanding of compliance frameworks and security standards, including NIST SP 800-53, NIST CSF, ISO 27001/27002, and SOC 2
Strong technical understanding of networking, computing, and cybersecurity concepts
Ability to use examples and analogies to simplify complex subjects
Certifications such as CISSP, CISA, CRISC, or CISM useful but not essential
Right to work in the UK without visa sponsorship

Benefits

Comp & perks

25 days annual leave, plus 2 volunteering days and your birthday off
Holiday entitlement increases up to 30 days after five years of service
Enhanced parental leave
Mindfulness groups
Critical illness cover
7% matched pension
Private healthcare plan
Career and learning development through the platform
Dedicated professional development fund
‘Learn Anything’ fund
Recognition and rewards for great work and living company values and behaviours
Flexible and remote working
Flexible start and finish times
Reduced-hours flexible working options
Team events and socials throughout the year
Railcard loan
Cycle scheme to buy a new bike