About the Role
Cyber Security Engineer - Governance, Risk & Compliance (GRC) - UK Remote
Immersive is hiring a Cyber Security Engineer specialising in Governance, Risk & Compliance (GRC) to join the Product team, working closely with Cyber Team Leads. This role involves creating emulated environments within the platform that simulate incidents within highly regulated sectors in an engaging and intuitive way for the community. You will design, build and deliver practical and theory content to gamify governance, risk and compliance, making it engaging and fun for end users, teaching complex concepts in an innovative way.
Responsibilities
•Utilising knowledge of Governance, Risk & Compliance to plan, write and improve security labs, challenges and online learning content on the Immersive One platform
•Produce multi-format content utilising various teaching methods: practical exercises, questions & gamification around GRC
•Peer review cyber labs and ranges to ensure they function as expected
•Research the latest GRC regulations and standards and compile this research to deliver practical and theory labs to users
•Compile technical research into understandable, concise content for both technical and non-technical audiences
•Act as a GRC subject matter expert for engineering and product teams, embedding "security and privacy by design" principles into the SDLC
Requirements
•A number of years of experience working within a heavily regulated industry (e.g., FinTech, Healthcare, or Government), cyber vendor or consultancy
•Have conducted audits and have an understanding of how GRC works in practice and helping companies comply to these standards
•In-depth knowledge of the MITRE ATLAS & D3FEND frameworks and how they are used to help enterprises deal with threats to their organisation
•Deep understanding of common compliance frameworks and security standards (e.g., NIST SP 800-53, NIST CSF, ISO 27001/27002, SOC 2)
•Strong technical understanding of networking, computing and cyber security concepts
•Ability to use examples and analogies to simplify complex subjects - able to inhabit the mindset of the target audience to create realistic simulations
•Certifications such as CISSP, CISA, CRISC, CISM would be useful to have but not essential
•Attitude and approach is just as important as technical skills - a natural problem solver and 'tinkerer' who enjoys prototyping and iteration
About Immersive
Immersive One is the leading cyber resilience solution across the globe. Immersive is the cyber proving ground for the AI enterprise, helping organizations test whether people, AI-enabled workflows, cyber security teams, agents, and leaders can perform securely under realistic pressure. Trusted by 30%+ of the Fortune 100 and ranked #1 in the Forrester Wave™ 2026, Immersive works with brands like Citi, Pfizer, Humana, and HSBC. Founded in 2017 from a cargo container in Bristol, UK, Immersive has grown to over 300 employees globally, raised more than $180 million in funding, and been voted a Best Place to Work on multiple occasions.
Benefits
•25 days annual leave + 2 volunteering days and your birthday off
•Holiday days increase with tenure, up to a maximum of 30 days after five years of service
•Enhanced parental leave, mindfulness groups, critical illness cover, 7% matched pension, private healthcare plan
•Career and learning development through the platform, a dedicated professional development fund and a 'Learn Anything' fund
•Recognition & rewards for doing great work and living company values
•Informal or formal flexible working options (e.g. flexible start/finish times, reduced hours)
•Vibrant team culture with team events throughout the year
•UK hub based in central Bristol, 10 minutes' walk from the train station
•Railcard loan and cycle scheme to buy a new bike
