Cyber Security Engineer - Governance, Risk & Compliance
New
I
ImmersiveCybersecurity education
Remote (UK Only)Full-Time
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- A number of years of experience working within a heavily regulated industry (e.g., FinTech, Healthcare, or Government), cyber vendor or consultancy.
- Required Skills
- CybersecurityNetworking
Requirements
- Have experience working within a heavily regulated industry such as FinTech, healthcare, or government, a cyber vendor, or a consultancy.
- Have conducted audits and understand how GRC works in practice and how to help companies comply with standards.
- Have in-depth knowledge of the MITRE ATLAS and D3FEND frameworks and their use in addressing organizational threats.
- Have a deep understanding of common compliance frameworks and security standards, including NIST SP 800-53, NIST CSF, ISO 27001/27002, and SOC 2.
- Have a strong technical understanding of networking, computing, and cybersecurity concepts.
- Be able to use examples and analogies to simplify complex subjects and create realistic simulations for target audiences.
- CISSP, CISA, CRISC, or CISM certification is useful but not essential.
- Enjoy tackling complex problems, finding solutions, prototyping, and iteration.
Responsibilities
- Plan, write, and improve security labs, challenges, and online learning content for the Immersive One platform.
- Produce multi-format GRC content using practical exercises, questions, and gamification.
- Peer review cyber labs and ranges to ensure they function as expected.
- Research the latest GRC regulations and standards and compile research into practical and theory labs.
- Translate technical research into concise, understandable content for technical and non-technical audiences.
- Act as a GRC subject matter expert for engineering and product teams.
- Embed security and privacy by design principles into the SDLC.
View Full Description & ApplyYou'll be redirected to the employer's site
