Head of Content transforming Pairs’ founder and investor interviews into articles, newsletters, social posts, and video. Owning the content calendar, publishing cadence, and engagement results.
About the role
- Senior GRC Content Engineer building hands-on GRC training for TryHackMe’s gamified cybersecurity platform. Creating ISO 27001, EU regulation, audit, and risk-management learning experiences.
Responsibilities
- Research, design, and develop GRC training rooms, modules, and learning paths
- Create hands-on risk register exercises, Statement of Applicability labs, audit simulations, DDQ challenges, regulator-notification drills, and branching tabletop scenarios
- Act as a subject-matter expert across ISO 27001/ISMS, EU regulation (NIS2, DORA, CRA), risk management, and audit readiness
- Own technical accuracy across the GRC portfolio alongside the squad lead
- Build and maintain lab environments using open-source GRC tooling such as Eramba and TryHackMe interactive widgets
- Work with platform and design teams as needed
- Plan and design portions of the GRC content roadmap
- Use customer requests, demand signals, and competitive gaps to pressure-test scoping decisions
- Track regulatory changes and keep shipped content current
- Guide and review contractors and other content engineers
- Collaborate with Content Engineering leadership to improve content development
- Collaborate with Sales/CS to align content with enterprise customer needs
Requirements
- At least 5+ years of hands-on GRC / information security experience
- Practical, implementation-level experience with ISO/IEC 27001 (2022 control set): scoping, risk assessment and treatment, Statement of Applicability, and internal and certification audits
- Working knowledge of NIS2, including Articles 20/21/23, DORA, and awareness of the Cyber Resilience Act
- Strong grounding in risk management practice, including qualitative assessment methods, risk registers, controls, control types, risk treatment, and residual risk sign-off
- Experience with audit and evidence workflows
- Familiarity with third-party/vendor risk, due-diligence questionnaires, SOC 2 reports, and contractual security requirements
- Solid understanding of technical security, including networks, systems, cloud, and common attack patterns
- Excellent written English
- Ability to research and synthesise regulations, framework revisions, enforcement trends, and competitor coverage
- Creative, learner-first mindset
- Comfort with ambiguity
- Preferred: instructional design or training-delivery experience
- Preferred: tabletop exercises or crisis simulations
- Preferred: SOC 2 Type 2, PCI-DSS, HIPAA, CMMC, or Cyber Essentials exposure
- Preferred: familiarity with Drata, Vanta, OneTrust, ServiceNow GRC, or AuditBoard
- Preferred: AI tools in GRC workflows
- Preferred: Python or Bash scripting
- Preferred: CTF or gamified content design
- Certifications such as CISSP, CISM, CISA, CRISC, CGRC, ISO/IEC 27001 Lead Implementer/Lead Auditor, or CIPP/E appreciated
- At this time, we are unable to provide sponsorship
Benefits
- 100% Remote - In a fully digital world, work from anywhere you want!
- Flexi Time - Choose your own hours as long as you have at least 4 hours of overlap with the UK timezone (from 8am - 6pm)
- A dedicated work laptop + any accessories you need to do your best work
- Branded swag bundle
- £2,500 training budget to acquire certifications, and more
- Annual company retreat, fully paid for by us
- Health Insurance - if you're in a country that doesn't have public health care
- Enhanced Maternity & Paternity package on top of statutory requirements
- 401k / Pension
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Content Marketing Lead owning strategy, creation, and brand voice for Orchestry’s Microsoft 365 SaaS platform. Scaling content programs and AI workflows to drive demand, SEO, sales, and growth.
Content Marketing Manager creating multi - channel campaigns and thought leadership for Spektrix, an arts and culture software company. Driving audience engagement, lead generation, and regional editorial quality.
Senior Content Rigger rigging game assets and building animation pipeline tools for Sledgehammer Games, a Call of Duty developer. Remote in Canada or hybrid from its Toronto studio.
Global Digital Product Content Specialist publishing Arc’teryx ecommerce copy, translations, and imagery across global websites. Coordinating launches, workflows, and optimization for the brand’s digital commerce team.
Conseiller principal créant des contenus numériques et multimédias pour PEAK, firme de services financiers. Pilotage de plateformes, intégration de l’IA et production d’événements corporatifs.
Coordonnateur marketing et contenu chez Maître Carré, qui réinvente l’habitation multi - résidentielle durable. Création de contenu, animation des communautés et coordination de campagnes marketing.
Content Integrator creating bilingual digital campaigns for Intact, Canada’s largest property and casualty insurer. Building accessible emails and broker portal experiences across Salesforce Marketing Cloud and Drupal.
Contract Content Migration Specialist migrating bilingual nonprofit content from Drupal to a headless CMS. Preserving metadata, media, relationships and redirects through launch.
EC
Senior UX Content Designer improving content standards, research operations, and design systems. Supporting EDC’s digital experiences for Canadian exporters through accessible, scalable practices.