[Hiring] Cyber Security Engineer @Immersive

Role Description

Immersive is hiring! Could you be our next Cyber Security Engineer?

Due to customer demand and increasing maturity within our platform, we have an exciting and challenging opportunity for an experienced cyber professional within the cyber compliance sector - with expertise in conducting governance risk and compliance audits - to join our Product team as Cyber Security Engineer, specializing in Governance, Risk & Compliance (GRC).

If successful, you will join our Product team working closely with our Cyber Team Leads as we embark on this exciting new phase of product development within our market-leading cyber resilience platform.

This isn’t an ordinary GRC role - we know everyone claims this and will tell you their role is super unique…but this one really is.

• You are constantly researching, learning, and geeking out on all things GRC related, from ISO standards to the latest AI governance, and then taking that knowledge and creating labs and ranges.
• You will be a key player in our Cyber team, shaping and influencing the rollout of our offensive security and AI pen test content roadmap, simulating attack paths and helping train our users to counter the latest threats.
• You will be educating the world of GRC professionals on how to ensure they are secure in what they do.
• Your mission is to evolve and disrupt within the governance space by creating emulated environments within our platform that will simulate incidents within highly regulated sectors in an engaging and intuitive way for our community.
• You will design, build, and deliver practical and theory content to gamify governance, risk, and compliance, making it engaging and fun for the end user.
• You'll shake up traditional training and teach complex concepts in an innovative way.

If you have a passion for cyber security, are experienced in the area of GRC, and want to disrupt how employees build their resilience against the latest threats, we will appreciate your input and give you the space to innovate within our market-leading platform, Immersive One.

Your main responsibilities (we're scaling fast, so these may change as we grow):

• Utilising knowledge of Governance, Risk & Compliance to plan, write, and improve our security labs, challenges, and online learning content on the Immersive One platform.
• Produce multi-format content utilising various teaching methods; practical exercises, questions & gamification around GRC.
• Peer review cyber labs and ranges to ensure they function as expected.
• Research the latest GRC regulations and standards and compile this research to deliver practical and theory labs to users.
• Compile technical research into understandable concise content for both technical and non-technical audiences.
• Act as a GRC subject matter expert for our engineering and product teams, embedding "security and privacy by design" principles into the SDLC.

Qualifications

• A number of years of experience working within a heavily regulated industry (e.g., FinTech, Healthcare, or Government), cyber vendor, or consultancy.
• In-depth knowledge of the MITRE ATLAS & D3FEND frameworks and how they are used to help enterprises deal with threats to their organisation.
• Deep understanding of common compliance frameworks and security standards (e.g., NIST SP 800-53, NIST CSF, ISO 27001/27002, SOC 2).
• Strong technical understanding of networking, computing, and cyber security concepts.
• Ability to use examples and analogies to simplify complex subjects.
• Certifications such as CISSP, CISA, CRISC, CISM would be useful to have but not essential.
• Attitude and approach are just as important as technical skills for this role.

Requirements

• Enjoy tackling complex problems and finding solutions.
• Be a natural problem solver and 'tinkerer' who enjoys prototyping and iteration.

Benefits

• Time off, flexible and remote working, including 25 days annual leave + 2 volunteering days and your birthday off.
• Increased holiday days the longer you are with Immersive, up to a maximum of 30 days after five years of service.
• Enhanced parental leave, mindfulness groups, critical illness cover, 7% matched pension, private healthcare plan, and more.
• Career and learning development through the platform, a dedicated professional development fund, and our ‘Learn Anything’ fund.
• Recognition & Rewards for doing great work and living our values and behaviours.
• Informal or formal flexible working options, e.g., flexible start and finish times, reduced hours.
• Vibrant team culture with team events throughout the year.
• Easy access to the UK hub, based in the centre of Bristol, just a 10-minute walk from the train station.
• Railcard loan and cycle scheme to buy a new bike.