Senior GRC Content Engineer

Job not on LinkedIn

🔥 0 minutes ago

🌏 Anywhere in the World

⏰ Full Time

🟠 Senior

✍️ Content Marketing Manager

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

TryHackMe

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2018

🔒 Cybersecurity

📚 Education

☁️ SaaS

Cybersecurity • Education • SaaS

TryHackMe is an online learning platform that makes learning and teaching cybersecurity accessible and practical through prebuilt courses, cloud-hosted virtual machines (VMs), and hands-on labs designed for CTFs, workshops, assessments, and training. Launched in 2018, the platform emphasizes practical, deployable environments so users can avoid local VM configuration, and it serves millions of learners while supporting both individual and organizational training needs.

📋 Description

• Research, design, and develop GRC training rooms, modules, and learning paths • Create hands-on risk register exercises, Statement of Applicability labs, audit simulations, DDQ challenges, regulator-notification drills, and branching tabletop scenarios • Act as a subject-matter expert across ISO 27001/ISMS, EU regulation (NIS2, DORA, CRA), risk management, and audit readiness • Own technical accuracy across the GRC portfolio alongside the squad lead • Build and maintain lab environments using open-source GRC tooling such as Eramba and TryHackMe interactive widgets • Work with platform and design teams as needed • Plan and design portions of the GRC content roadmap • Use customer requests, demand signals, and competitive gaps to pressure-test scoping decisions • Track regulatory changes and keep shipped content current • Guide and review contractors and other content engineers • Collaborate with Content Engineering leadership to improve content development • Collaborate with Sales/CS to align content with enterprise customer needs

🎯 Requirements

• At least 5+ years of hands-on GRC / information security experience • Practical, implementation-level experience with ISO/IEC 27001 (2022 control set): scoping, risk assessment and treatment, Statement of Applicability, and internal and certification audits • Working knowledge of NIS2, including Articles 20/21/23, DORA, and awareness of the Cyber Resilience Act • Strong grounding in risk management practice, including qualitative assessment methods, risk registers, controls, control types, risk treatment, and residual risk sign-off • Experience with audit and evidence workflows • Familiarity with third-party/vendor risk, due-diligence questionnaires, SOC 2 reports, and contractual security requirements • Solid understanding of technical security, including networks, systems, cloud, and common attack patterns • Excellent written English • Ability to research and synthesise regulations, framework revisions, enforcement trends, and competitor coverage • Creative, learner-first mindset • Comfort with ambiguity • Preferred: instructional design or training-delivery experience • Preferred: tabletop exercises or crisis simulations • Preferred: SOC 2 Type 2, PCI-DSS, HIPAA, CMMC, or Cyber Essentials exposure • Preferred: familiarity with Drata, Vanta, OneTrust, ServiceNow GRC, or AuditBoard • Preferred: AI tools in GRC workflows • Preferred: Python or Bash scripting • Preferred: CTF or gamified content design • Certifications such as CISSP, CISM, CISA, CRISC, CGRC, ISO/IEC 27001 Lead Implementer/Lead Auditor, or CIPP/E appreciated • At this time, we are unable to provide sponsorship

🏖️ Benefits

• 100% Remote - In a fully digital world, work from anywhere you want! • Flexi Time - Choose your own hours as long as you have at least 4 hours of overlap with the UK timezone (from 8am - 6pm) • A dedicated work laptop + any accessories you need to do your best work • Branded swag bundle • £2,500 training budget to acquire certifications, and more • Annual company retreat, fully paid for by us • Health Insurance - if you're in a country that doesn't have public health care • Enhanced Maternity & Paternity package on top of statutory requirements • 401k / Pension