CorpSec Compliance Manager

Who are we?

From your everyday PowerPoint presentations to Hollywood movies, AI will transform the way we create and consume content. Today, people want to watch and listen, not read — both at home and at work. If you’re reading this and nodding, check out our brand video.

Despite the clear preference for video, communication and knowledge sharing in the business environment are still dominated by text, largely because high-quality video production remains complex and challenging to scale—until now….

Meet Synthesia

We're on a mission to make video easy for everyone. Born in an AI lab, our AI video communications platform simplifies the entire video production process, making it easy for everyone, regardless of skill level, to create, collaborate, and share high-quality videos. Whether it's for delivering essential training to employees and customers or marketing products and services, Synthesia enables large organizations to communicate and share knowledge through video quickly and efficiently. We’re trusted by leading brands such as Heineken, Zoom, Xerox, McDonald’s and more. Read stories from happy customers and what 1,200+ people say on G2.

In 2023, we were one of 7 European companies to reach unicorn status. In February 2024, G2 named us as the fastest growing company in the world. We’ve raised over $150M in funding from top-tier investors, including Accel, Nvidia, Kleiner Perkins, Google and top founders and operators including Stripe, Datadog, Miro, Webflow, and Facebook.

About the role

We are looking for an additional team member on the Synthesia Security Team - specifically on what we like to call the Corporate Security, or “CorpSec”, team.

At Synthesia, our CorpSec and AppSec teams work hand-in-hand to ensure the highest level of security in our operations across the company. CorpSec owns the general Security Operations, and focuses on the protection of corporate information and assets, while AppSec is concerned with the security of our applications, working extremely close to our Product engineers.

We are looking for someone who can assist us in maintaining and improving our Security and Compliance Operations efforts. Responsibilities will include:

• Building out and maintaining Trust Operations
• Supporting our sales and legal teams in answering security questions coming from customers
• Participate in compliance management related efforts (SOC2, ISO27001 and ISO42001)
• Participating in security incident response efforts
• Be a reasonable, friendly and effective internal security advocate

Required skills and experience:

• Technical know-how: You should have 4+ years of security engineering experience and a good understanding of the technical aspects of security. While you don't need to be a master hacker, we are looking for someone with a technical security background.
  • Important: We are not looking for a “paper pusher”. We are looking for a team member who understands the technical side deeply.

• Compliance leadership experience: You have successfully brought stakeholders together across the company to achieve accreditation in ISO27001 - even better if you also have experience in other frameworks like FedRAMP, ISO42001 etc.
• Privacy knowledge: You have deep knowledge of GDPR and similar privacy-focused frameworks.
• Excellent communication skills: We are sometimes customer facing, and assist the commercial functions in answering security-related questions coming from customers and prospects.
• AWS: You have worked professionally with AWS and have a good understanding of the various security challenges that come with that.
• Growth startup: You have been part of the journey for a fast-growing company.

Nice to Haves:

• Security Incident response: If you have been part of responding to actual incidents, that’s also a big plus.
• Security platforms: Experience with any of the following is great, especially if you know how to work with the respective APIs: Okta, CrowdStrike, Vanta, Torii, Notion, Wiz.
• Tech: Experience with Python, NodeJS, Terraform.
• DLP and data classification: Regardless of endpoint, network or SaaS-based - any experience is appreciated.
• Hands-on experience with SD-WAN technologies (e.g. Netskope, Zscaler, etc)

If you meet the required skills and some of the "nice to haves", we'd like to talk!

The good stuff...

• For this specific position we can consider remote-first within Europe
• Attractive compensation  (salary + stock options + bonus)
• Private Health Insurance
• Hybrid work setting with an office in London
• Cycle to work salary sacrifice scheme to commute to the office
• 25 days of annual leave + public holidays
• Work in a great company culture with the option to join regular planning and socials at our hubs, and company retreats
• A generous referral scheme when you know people that are amazing for us
• Strong opportunities for your career growth

Salary: compensation starts at EUR120k + stock options
Please note that this is a remote role based in European or US (EST) timezone. This is full-time employment only (no contract/B2B possible).