GRC Analyst

London, United Kingdom
6 days ago
Job Type
Permanent
Work Location
Remote
Posted
29 Apr 2026 (6 days ago)

Synthesia is the world’s leading AI video platform for business, used by over 90% of the Fortune 100. Founded in 2017, the company is headquartered in London, with offices and teams across Europe and the US.

As AI continues to shape the way we live and work, Synthesia develops products to enhance visual communication and enterprise skill development, helping people work better and stay at the center of successful organizations.

Following our recent Series E funding round, where we raised $200 million, our valuation stands at $4 billion. Our total funding exceeds $530 million from premier investors including Accel, NVentures (Nvidia's VC arm), Kleiner Perkins, GV, and Evantic Capital, alongside the founders and operators of Stripe, Datadog, Miro, and Webflow.

The role:

We are looking for aGRC Analyst to help us run and evolve our governance, risk, and compliance program in a way that iscredible with technical teams anduseful for the business.

We are not looking for a traditional “paper compliance” role. The ideal candidate has astrong technical foundation - whether from engineering, IT management, DevOps, SRE, or a similar hands-on background - and can bridge the gap between how systems are actually built and operated (GitHub, CI/CD, Kubernetes, cloud, observability) and what we need to demonstrate for audits, customers, and leadership.

You will work closely with Engineering, DevOps/Platform, Security, Legal, and customer-facing teams to keep us audit-ready, reduce risk in practical ways, and support the next wave of compliance efforts (for exampleISO 22301, and longer-term options likeHITRUST andFedRAMP).

You don’t need to be a compliance expert, but if you have a solid background in security, are eager to learn, and are ready to be bold and take ownership, this role offers a great opportunity to grow quickly and actually have a real impact in a hypergrowth AI unicorn.

What you'll be doing:

GRC Program Ownership

  • Own and continuously improve our GRC program across ISO 27001, SOC 2, ISO 27701, and ISO 42001, including control mapping and evidence expectations.

  • Partner with control owners to make compliance repeatable and low-friction - evidence as a habit, not a scramble.

  • Drive audit readiness: artifacts, timelines, action tracking, and clear control demonstration.

  • Improve policies, standards, and procedures so they reflect how we actually operate.

Technical-to-Compliance Translation

  • Build strong working relationships with DevOps/Platform and engineering teams.

  • Evaluate technical implementations - branch protection, CI/CD, Kubernetes, cloud architecture, monitoring - well enough to ask good questions and validate evidence.

  • Translate technical reality into clear audit narratives without losing accuracy.

Risk Management

  • Contribute to risk identification and assessment across technical, operational, and vendor domains.

  • Maintain risk registers and track mitigations to closure.

  • Support leadership reporting by surfacing themes and trends that lead to real decisions.

Growth into Future Certifications

  • Evaluate and prepare for ISO 22301, and potentially HITRUST and FedRAMP as business needs evolve.

  • Identify gaps early and propose pragmatic roadmaps that engineering teams can execute.

We'd love to hear from you if you:

  • Have a hands-on technical background (engineering, DevOps/SRE, IT management, or similar) and understand how cloud environments work, especially AWS.

  • Can follow technical conversations well beyond what a traditional auditor can - you understand how the sausage is made.

  • Have experience supporting audit cycles and know what good evidence looks like.

  • Are organised, proactive, and can drive multiple workstreams independently - with clear, thoughtful communication across both technical and business audiences.

  • Have technical aptitude: comfortable writing a simple script when needed, and experienced using AI and LLM tools in your work.

Bonus points if you:

  • Have direct experience with ISO 27001, SOC 2, ISO 42001, or ISO 27701, or have worked in ISO 22301, HITRUST, or FedRAMP environments.

  • Have used GRC tooling such as Vanta, Drata, or OneTrust.

  • Have built lightweight automation to reduce compliance toil.

  • Have worked in a fast-growing SaaS company and supported an external audit.

Why join us?

We’re living the golden age of AI. The next decade will yield the next iconic companies, and we dare to say we have what it takes to become one. Here’s why,

Our culture

At Synthesia we’re passionate about building, not talking, planning or politicising. We strive to hire the smartest, kindest and most unrelenting people and let them do their best work without distractions. Our work principles serve as our charter for how we make decisions, give feedback and structure our work to empower everyone to go as fast as possible.You can find out more about these principles here.

Serving 50,000+ customers (and 50% of the Fortune 500)

We’re trusted by leading brands such as Heineken, Zoom, Xerox, McDonald’s and more. Read stories from happy customers and what 1,200+ people say on G2.

Proprietary AI technology

Since 2017, we’ve been pioneering advancements in Generative AI. Our AI technology is built in-house, by a team of world-class AI researchers and engineers. Learn more about our AI Research Lab and the team behind.

AI Safety, Ethics and Security

AI safety, ethics, and security are fundamental to our mission. While the full scope of Artificial Intelligence's impact on our society is still unfolding, our position is clear:People first. Always. Learn more about our commitments to AI Ethics, Safety & Security.

The hiring process:

  1. 30-40min call with our Technical Recruiter

  2. 60mins call with the Hiring Manager about your past projects

  3. Take-Home Assignment

  4. 90mins Debrief with the Hiring Manager and our Head of Security

Other important info:

  • This is aremote role from the UK OR an EU country

  • This is full-time employment only -no contractors possible

  • You can view our benefits here

Related Jobs

View all jobs
Spotlight

Senior ML Compiler Engineer

Fractile Bristol, United Kingdom
Spotlight

Machine Learning Engineer - National Security (Gloucestershire)

Mind Foundry Gloucester, Gloucestershire, United Kingdom
On-site Clearance Required

Forward Deployed Engineer - London

OpenAI London, United Kingdom
Hybrid

Forward Deployed Engineer - Sydney

OpenAI United Kingdom
Hybrid

Forward Deployed Engineer - Munich

OpenAI United Kingdom
Hybrid

Forward Deployed Engineer (FDE) - Seattle

OpenAI United Kingdom
Permanent

Business Lead, Life Sciences

OpenAI London, United Kingdom
Permanent

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Where to Advertise Machine Learning Jobs in the UK (2026 Guide)

Advertising machine learning jobs in the UK requires a different approach to most technical hiring. The candidate pool is small, highly specialised and in demand across AI labs, financial services, healthcare, autonomous systems and consumer technology simultaneously. Machine learning engineers and researchers move between roles through professional networks, conference communities and specialist platforms — not general job boards where ML roles compete with unrelated software engineering positions for the same audience. This guide, published by MachineLearningJobs.co.uk, covers where to advertise machine learning roles in the UK in 2026, how the main platforms compare, what employers should expect to pay, and what the data says about hiring across different role types.

Machine Learning Jobs UK 2026: What to Expect Over the Next 3 Years

Machine learning has undergone a transformation that few technology disciplines can match. In the space of three years it has moved from a specialism sitting at the edges of most organisations' technology strategies to a capability that sits at the centre of them. The tools have changed, the expectations have shifted, and the range of industries treating machine learning as a core business function — rather than an experimental one — has expanded dramatically. For job seekers, this creates both opportunity and complexity in roughly equal measure. The machine learning jobs market of 2026 is significantly larger than it was three years ago, but it is also significantly more demanding. Employers have developed more sophisticated expectations, the technical bar for specialist roles has risen, and the landscape of tools, frameworks, and architectural patterns that practitioners are expected to know has broadened considerably. The candidates who will thrive over the next three years are those who understand where the discipline is heading — which specialisms are attracting the most investment, which technologies are reshaping what machine learning engineers and researchers are expected to build, and how the definition of a machine learning career is evolving beyond the model-building core toward a much wider range of roles across the full ML lifecycle. This article breaks down what the UK machine learning jobs market is likely to look like through to 2028 — covering the titles emerging right now, the technologies driving employer demand, the skills that will matter most, and how to position your career ahead of the curve.

New Machine Learning Employers to Watch in 2026: UK and Global Companies Driving ML Innovation

Machine learning (ML) has transitioned from a specialised field into a core business capability. In 2026, organisations across healthcare, finance, robotics, autonomous systems, natural language processing, and analytics are expanding their machine learning teams to build scalable intelligent products and services. For professionals exploring opportunities on www.MachineLearningJobs.co.uk , understanding the companies that are scaling, winning investment, or securing high‑impact contracts is crucial. This article highlights the new and high‑growth machine learning employers to watch in 2026, focusing on UK innovators, international firms with significant UK presence, and global platforms investing in machine learning talent locally.