Cyber Security Engineer - Governance Risk & Compliance (GRC) - UK Remote

Location: Remote in the United Kingdom. The UK hub is based in Bristol and may be visited occasionally.

Company

hirify.global develops hirify.global One, a cyber resilience platform that helps organizations assess and improve the security performance of people, AI-enabled workflows, cybersecurity teams, leaders, and AI agents.

What you will do

• Plan, write, and improve security labs, challenges, and online learning content focused on governance, risk, and compliance.
• Design practical exercises, theory content, questions, and gamification for GRC learning.
• Create emulated environments that simulate incidents in highly regulated sectors and realistic attack paths.
• Research current GRC regulations and standards, then convert findings into concise content for technical and non-technical audiences.
• Peer-review cyber labs and ranges to ensure they function as expected.
• Act as a GRC subject matter expert for engineering and product teams, embedding security and privacy by design into the SDLC.

Requirements

• Several years of experience in a heavily regulated industry, cybersecurity vendor, or consultancy, including conducting GRC audits.
• In-depth knowledge of MITRE ATLAS and MITRE D3FEND.
• Deep understanding of NIST SP 800-53, NIST CSF, ISO 27001/27002, SOC 2, and other common compliance frameworks.
• Strong technical understanding of networking, computing, and cybersecurity concepts.
• Ability to explain complex subjects through examples and analogies and create realistic simulations for real-world users.
• Strong problem-solving skills with an interest in prototyping, iteration, research, and experimentation.

Nice to have

• CISSP, CISA, CRISC, or CISM certification.

Culture & Benefits

• Flexible remote working with flexible start and finish times or reduced-hours options.
• 25 days of annual leave, two volunteering days, and a birthday day off, increasing to up to 30 days after five years.
• Enhanced parental leave, private healthcare, critical illness cover, mindfulness groups, and a 7% matched pension.
• Professional development funding, access to the platform, and a separate Learn Anything fund.
• Inclusive, collaborative culture with team events and recognition and rewards programs.
• UK hub access in central Bristol, with a railcard loan and cycle scheme.

Hiring process

• The recruitment process is described on hirify.global’s dedicated interview process page.