Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Governance, Risk & Compliance Analyst role.

Rezi rewrites your resume against Foundry's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Governance, Risk & Compliance Analyst posting at Foundry — free, in seconds.

About the Role

This role is an opportunity for a driven individual to play a major role in strengthening Foundry’s governance, risk, and compliance posture, including the safe adoption and governance of AI. You will support GRC frameworks and policies, conduct risk assessments, and contribute to the security and governance strategy. You’ll also help establish practical guardrails around AI use and utilize AI tools to enhance efficiency.

Responsibilities

Support the development, implementation, and enforcement of GRC frameworks, policies, and controls.
Conduct regular risk assessments and maintain the company’s risk register.
Ensure compliance with relevant legal, regulatory, and industry standards.
Assist in coordinating internal and external audits, including evidence gathering and remediation tracking.
Support control testing and report on key risk and performance indicators to senior management.
Contribute to the Foundry cyber program, helping manage controls, threats and vulnerabilities.
Support the development and maintenance of Foundry’s AI governance framework, including the acceptable use policy, approved-tools list, and data guidance.
Run the intake and risk-assessment process for new AI tools and use cases (vendor due diligence, data handling, IP and output risks), and maintain the AI use-case inventory.
Help assess AI-specific risks such as data leakage, over-reliance, shadow AI, and IP exposure, with awareness of our studio customers’ confidentiality expectations.
Track emerging AI regulation and standards (e.g., EU AI Act, ISO/IEC 42001, NIST AI RMF) and help translate them into practical controls.
Use AI tools in your own work (e.g., drafting policies, mapping controls), with appropriate human review, and share what works with the team.
Support vendor risk assessments and help complete customer security questionnaires, maintaining a library of approved responses and evidence.
Collaborate with Legal, Finance, IT, Engineering and Product to embed risk awareness, offering practical advice that helps teams move forward safely.
Contribute to privacy, data governance, business continuity and incident response activity.

Requirements

Experience in a GRC, IT audit, risk, or similar compliance-focused role (early-career experience considered).
Working knowledge of GRC frameworks and methodologies.
Familiarity with GDPR and ISO 27001.
A pragmatic, risk-based mindset with the judgment to balance risk and velocity.
Genuine interest in AI, having used AI tools (e.g., LLM assistants) in your own work and an understanding of their risks and limitations.
Excellent analytical, problem-solving, and organisational skills with high attention to detail.
Strong communication skills, including the ability to explain technical and regulatory topics to non-specialists and build relationships across the business.
Inquisitive and proactive, able to work autonomously on defined projects.
A genuine interest in technology, cybersecurity, and the industry we serve.

Skills

Cyber and AI governance frameworks (Mitre Att&ck, NIST AI RMF, EU AI Act)
GRC platforms
Vendor risk management
Customer questionnaire processes
CISA
CRISC
ISO 27001 Lead Auditor/Implementer
IAPP AIGP

Location

London, UK

Work Type

Hybrid

Experience Level

Early-career experience considered

Education Level

Relevant certifications or progress towards them

Benefits

25 days’ holiday plus bank holidays
Pension scheme
Private Medical Insurance
Health Cash Plan
Life Assurance
Group Income Protection
Season Ticket Travel Loan and Cycle to Work
Regular social events and competitions
Annual Personal Development Time
Annual Passion Days

About the Company

Foundry has a 30-year heritage in developing creative software for the Media and Entertainment industry, and a portfolio of award-winning products.
It advances the art and technology of visual experience with creative leaders around the globe, including major feature film studios and post-production houses such as ILM, DNEG, Walt Disney Animation Studios, Wētā FX, Pixar, Marvel, Netflix, Framestore and Skydance Animation.
Foundry software was integral in the making of every VFX Academy Award-winning film since 2007.
The company has been recognised and honoured at the highest level in the industry, including four Academy Sci-Tech Awards for Mari, Katana, Nuke and Furnace, two HPA Engineering Excellence awards for Flix and Nuke respectively, and an Engineering Emmy for Nuke.