At a Glance
- Tasks: Support governance, risk, and compliance frameworks while working with AI tools to enhance efficiency.
- Company: Join Foundry, a leader in creative software for the Media and Entertainment industry.
- Benefits: Enjoy 25 days holiday, private medical insurance, and opportunities for personal development.
- Other info: Collaborative culture with excellent career growth and regular social events.
- Why this job: Make a real impact on AI governance and compliance in a dynamic tech environment.
- Qualifications: Experience in GRC or IT audit roles, with a keen interest in AI and technology.
The predicted salary is between 63000 - 77000 £ per year.
Foundry has a 30-year heritage in developing creative software for the Media and Entertainment industry, and a portfolio of award-winning products. It advances the art and technology of visual experience with creative leaders around the globe, including major feature film studios and post-production houses such as ILM, DNEG, Walt Disney Animation Studios, Wētā FX, Pixar, Marvel, Netflix, Framestore and Skydance Animation. In partnership with these companies, Foundry solves complex visualization challenges to turn incredible ideas into reality. Its products are used to create breathtaking visual effects and animation on a wide range of feature films, episodic content, and commercials. Foundry software was integral in the making of every VFX Academy Award-winning film since 2007. The company has been recognised and honoured at the highest level in the industry, including four Academy Sci-Tech Awards for Mari, Katana, Nuke and Furnace, two HPA Engineering Excellence awards for Flix and Nuke respectively, and an Engineering Emmy for Nuke.
This is an opportunity for a bright, driven and ambitious individual to play a major role in strengthening Foundry’s governance, risk, and compliance posture, including how we adopt and govern AI safely. Reporting to the Senior Director of Corporate Technology and AI, you will support our GRC frameworks and policies, conduct risk assessments, and contribute to our security and governance strategy. You’ll also help put practical guardrails around AI use, and use AI tools yourself to work smarter. You’ll spend a minimum of two days each week in our London office, in Soho.
Essential
- Experience in a GRC, IT audit, risk, or similar compliance-focused role (early-career experience considered)
- Working knowledge of GRC frameworks and methodologies, and familiarity with GDPR and ISO 27001
- A pragmatic, risk-based mindset, with the judgement to balance risk and velocity
- Genuine interest in AI, having used AI tools (e.g., LLM assistants) in your own work and an understanding of their risks and limitations
- Excellent analytical, problem-solving, and organisational skills with high attention to detail
- Strong communication skills, including the ability to explain technical and regulatory topics to non-specialists and build relationships across the business
- Inquisitive and proactive, able to work autonomously on defined projects
- A genuine interest in technology, cybersecurity, and the industry we serve
Nice-to-have
- Experience using Cyber and AI governance frameworks (Mitre Att&ck, NIST AI RMF, EU AI Act)
- Experience with GRC platforms or vendor risk and customer questionnaire processes
- Relevant certifications or progress towards them (e.g., CISA, CRISC, ISO 27001 Lead Auditor/Implementer, IAPP AIGP)
Governance, Risk & Compliance
- Support the development, implementation, and enforcement of GRC frameworks, policies, and controls
- Conduct regular risk assessments and maintain the company’s risk register
- Help ensure compliance with relevant legal, regulatory, and industry standards
- Assist in coordinating internal and external audits, including evidence gathering and remediation tracking
- Support control testing and report on key risk and performance indicators to senior management
- Contribute to the Foundry cyber program, helping manage controls, threats and vulnerabilities
AI Governance
- Support the development and maintenance of Foundry’s AI governance framework, including the acceptable use policy, approved-tools list, and data guidance
- Run the intake and risk-assessment process for new AI tools and use cases (vendor due diligence, data handling, IP and output risks), and maintain the AI use-case inventory
- Help assess AI-specific risks such as data leakage, over-reliance, shadow AI, and IP exposure, with awareness of our studio customers’ confidentiality expectations
- Track emerging AI regulation and standards (e.g., EU AI Act, ISO/IEC 42001, NIST AI RMF) and help translate them into practical controls
- Use AI tools in your own work (e.g., drafting policies, mapping controls), with appropriate human review, and share what works with the team
Third-party Assurance & Collaboration
- Support vendor risk assessments and help complete customer security questionnaires, maintaining a library of approved responses and evidence
- Collaborate with Legal, Finance, IT, Engineering and Product to embed risk awareness, offering practical advice that helps teams move forward safely
- Contribute to privacy, data governance, business continuity and incident response activity
25 days’ holiday plus bank holidays, Pension scheme, Private Medical Insurance, Health Cash Plan, Life Assurance, Group Income Protection, Season Ticket Travel Loan and Cycle to Work, Regular social events and competitions, Annual Personal Development Time, Annual Passion Days.
Governance, Risk & Compliance Analyst employer: Foundry Visionmongers
Foundry is an exceptional employer, offering a dynamic work environment in the heart of central London, where creativity and innovation thrive. With a strong focus on employee growth, we provide 25 days of holiday, a comprehensive health cash plan, and opportunities for personal development, ensuring our team members are supported both professionally and personally. Our collaborative culture encourages autonomy and relationship-building, making it an ideal place for those passionate about AI and media production to make a meaningful impact.
StudySmarter Expert Advice🤫
We think this is how you could land Governance, Risk & Compliance Analyst
✨Join Compliance Communities
Get involved in compliance and risk communities — both online and offline. Look for forums, LinkedIn groups, or even local meetups where compliance pros hang out. You never know who might drop a job opportunity your way!
✨Attend Industry Conferences
Keep an eye out for compliance and risk management conferences and workshops in your area. These events are a goldmine for networking, and they often have job boards or recruiters on-site looking for new talent. Plus, it’s a chance to learn what's trending in the field.
✨Leverage Your University Career Services
If you’ve recently graduated or are still studying, head over to your university's career services. Many companies, including those in compliance, actively recruit fresh talent through these services, so make sure you tap into that resource.
✨Showcase Your Knowledge Online
Start writing articles or blog posts about compliance topics that interest you. Share them on platforms like LinkedIn to demonstrate your knowledge and passion. This not only builds your presence in the field but can also catch the attention of companies like Foundry Visionmongers looking for candidates who are engaged and informed.
We think you need these skills to ace Governance, Risk & Compliance Analyst
Some tips for your application 🫡
Show Your Understanding of Compliance:In the compliance-risk field, it's super important to showcase your understanding of regulations and risk management frameworks. Highlight any relevant coursework, certifications (like ICA or AML), or even projects that demonstrate your knowledge and commitment to this area. We want to see how you can navigate this complex landscape!
Quantify Your Achievements:When detailing your experience, try to quantify your achievements. For example, if you've previously worked on a project that improved compliance metrics or reduced risk exposure, give us the numbers! This data-driven approach really stands out to hiring managers in compliance-risk roles.
Tailor Your CV to Reflect Relevant Skills:Make sure your CV highlights skills that are particularly relevant to compliance, like attention to detail, analytical thinking, and report writing. Ensure these are easy to spot – consider using bullet points to break down your responsibilities and achievements for maximum impact!
Craft a Motivating Cover Letter:In your cover letter, let us know why you’re excited about the compliance-risk role at Foundry Visionmongers. Share what motivates you about compliance, and how you believe you can contribute to our mission. This is your chance to showcase not only your skills but also your passion for this important field!
How to prepare for a job interview at Foundry Visionmongers
✨Master the Regulations
Brush up on key compliance regulations relevant to the industry you're applying to. Familiarising yourself with specific laws and frameworks used in your field will give you an edge during technical questions. Show that you’re not just aware of them but can also apply them—think real-life scenarios!
✨Show Your Analytical Skills
Compliance roles really focus on analytical skills, so be prepared for case studies or situational questions during the interview. We've got to demonstrate how we approach risk assessments or compliance audits, possibly drawing on examples from past experiences or university projects. Bring some thoughtful case scenarios to discuss!
✨Know Your Tools
Get comfortable with commonly used compliance software and tools. Familiarity with platforms like RSA or MetricStream can really impress during your interview, as it shows you're ready to hit the ground running. If you’ve had any experience with them, make sure to highlight that!
✨Align with Company Culture
Since it's a full-time position, show your long-term commitment and interest in the company’s mission and values. Dive into how your ethics and professional philosophy align with Foundry Visionmongers’s stance on compliance. A shared vision can really resonate with interviewers looking for fit as much as skill!
