Note: The job is a remote job and is open to candidates in USA. Forward Financing is hiring a GRC Analyst to contribute to its Governance, Risk, and Compliance program, with a primary focus on third-party risk management. The role also maintains security policies and standards, supports risk analysis and the annual SOC2 audit, and helps improve GRC processes.

Responsibilities

• Conduct and manage third-party risk assessments, including initial due diligence and ongoing monitoring of vendors
• Collaborate with internal teams to help create and maintain security policies, standards, and procedures
• Assist with risk analysis to identify, evaluate, and track risks across the organization
• Support our annual SOC2 audit by helping to gather evidence, coordinate with stakeholders, and track findings
• Contribute to the development and maintenance of the GRC program to ensure it aligns with our business objectives
• Help promote a culture of security and risk awareness through clear communication and collaboration
• Utilize artificial intelligence and machine learning tools to automate routine tasks, identify patterns, and enhance the efficiency of governance, risk, and compliance processes
• Conduct internal audits of systems, processes, etc
• Take on ambiguous or unfamiliar problems as they arise, ask the right questions to get oriented quickly, and build the skills needed to solve them

Skills

• Bachelor's degree in a related field or equivalent practical experience
• 1-2+ years of experience in a GRC, risk, or compliance role
• Experience with third-party/vendor risk management processes, including conducting due diligence and assessments
• Familiarity with creating or maintaining policies, standards, and procedures
• Understanding of risk assessment methodologies and the ability to help identify and evaluate risks
• Experience supporting compliance audits, such as SOC2, by gathering evidence and coordinating with teams
• Strong organizational and communication skills
• Excellent verbal and written english language skills
• Demonstrated versatility — comfortable moving between tasks, tools, and priorities, and willing to stretch into work outside your immediate comfort zone
• A track record of asking good questions rather than guessing when something is unclear; you know the difference between productive independence and working in the dark
• Intellectual curiosity about risk, compliance, and security, with a genuine interest in understanding the "why" behind a process, not just the "how."
• Familiarity with AI and use cases within business settings
• A solid understanding of AWS or other cloud structures

Benefits

• 10% target bonus
• Medical, dental, and vision coverage
• Commuter benefits
• Flexible time-off policy
• Paid parental leave
• 401(k) match for US employees
• Wellness reimbursement
• Volunteering days
• Annual professional development budget
• Charitable donation match
• Remote-first work arrangement
• Employees are welcome to work from one of our premiere office locations
• Virtual and in-person opportunities to get to know colleagues, celebrate team wins, and have fun together

Company Overview

Company H1B Sponsorship