Remote opportunity at
Immersive LabsCyber Security Engineer - Governance, Risk & Compliance - Remote (UK Only)
Immersive Labs is hiring a Cyber Security Engineer to join its Product team and focus on Governance, Risk, and Compliance (GRC). The company operates a global…
Career Tools
About This Role
Immersive Labs is hiring a Cyber Security Engineer to join its Product team and focus on Governance, Risk, and Compliance (GRC). The company operates a global cyber resilience platform called Immersive One, which helps major enterprises test their readiness against cyber threats and safely adopt artificial intelligence. In this position, the successful candidate will design, build, and deliver gamified practical and theory-based learning content, labs, and security challenges centered around…
Job Description
Immersive Labs is hiring a Cyber Security Engineer to join its Product team and focus on Governance, Risk, and Compliance (GRC). The company operates a global cyber resilience platform called Immersive One, which helps major enterprises test their readiness against cyber threats and safely adopt artificial intelligence. In this position, the successful candidate will design, build, and deliver gamified practical and theory-based learning content, labs, and security challenges centered around regulatory frameworks and governance.
This role suits an experienced cyber professional who enjoys deep technical research, turning complex GRC standards into engaging educational simulations, and acting as a subject matter expert for engineering and product teams. The person in this role will shape offensive security and AI penetration testing content while helping compliance professionals strengthen their operational security.
Immersive Labs provides a supportive work culture that values drive, inclusivity, customer centricity, and teamwork. The company was founded in Bristol, UK, and has grown globally since 2017. Employees benefit from flexible working arrangements, professional development funds, wellness and family provisions, and regular team events.
Responsibilities
- Plan, write, and improve security labs, challenges, and online learning content on the platform using GRC expertise
- Produce multi-format content incorporating practical exercises, questions, and gamification related to GRC
- Peer review cyber labs and ranges to guarantee they operate correctly
- Research current GRC regulations and standards to build practical and theory-based labs for users
- Synthesize technical research into clear, concise material suitable for both technical and non-technical audiences
- Act as a GRC subject matter expert for engineering and product teams by embedding security and privacy by design into the software development lifecycle
Requirements
- Prior professional experience working in a heavily regulated industry such as healthcare, FinTech, or government, or within a cyber vendor or consultancy
- Demonstrated background conducting audits and practical application of GRC principles to help companies comply with standards
- In-depth knowledge of the MITRE ATLAS and D3FEND frameworks
- Deep understanding of common security standards and compliance frameworks including ISO 27001, ISO 27002, NIST CSF, NIST SP 800-53, and SOC 2
- Strong technical comprehension of networking, computing, and cybersecurity principles
- Ability to utilize analogies and examples to simplify complex technical subjects for a target audience
Qualifications
- Possession of professional certifications such as CISSP, CISA, CRISC, or CISM
Core Skills
Benefits
- 25 days of annual leave plus two volunteering days and your birthday off
- Holiday days increase with tenure up to a maximum of 30 days after five years
- Enhanced parental leave
- Critical illness cover and a private healthcare plan
- 7 percent matched pension
- Access to mindfulness groups
- Dedicated professional development fund and a Learn Anything fund
- Flexible start and finish times or reduced hours
- Railcard loan and cycle-to-work scheme
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this job remote?
Yes, the posting specifies that the role is remote within the UK.
What employment type is this position?
The source posting lists the employment type as full-time.
What salary is offered for this role?
The salary is not specified in the job posting.
What are the main duties of the Cyber Security Engineer?
Main duties include planning and writing GRC security labs and online learning content, researching compliance standards, peer-reviewing cyber ranges, and acting as a GRC subject matter expert for engineering and product teams.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.