GRC Analyst: AI-Driven Third-Party Risk & Compliance

Forward Financing; Boston (MA); On-site; USD 85,000 - 108,000; Full time

Job summary

Forward Financing, a Boston-based fintech, seeks a GRC Analyst to drive third-party risk assessments and strengthen governance, risk, and compliance programs. You will manage vendor due diligence, help shape policies, and support SOC2 audits through evidence collection and stakeholder coordination.

The role emphasizes proactive risk identification, strong communication, and the use of AI/ML tools to automate tasks, with a compensation framework targeting $85k–$108k USD plus a 10% bonus.

Qualifications

• Bachelor's degree in a related field or equivalent practical experience.
• 1-2+ years of experience in a GRC, risk, or compliance role.
• Experience with third‑party/vendor risk management processes, including conducting due diligence and assessments.
• Familiarity with creating or maintaining policies, standards, and procedures.
• Understanding of risk assessment methodologies and the ability to help identify and evaluate risks.
• Experience supporting compliance audits, such as SOC2, by gathering evidence and coordinating with teams.
• Strong organizational and communication skills.
• Excellent verbal and written English language skills.
• Demonstrated versatility — comfortable moving between tasks, tools, and priorities.
• A track record of asking good questions rather than guessing when something is unclear.
• Intellectual curiosity about risk, compliance, and security.

Responsibilities

• Conduct and manage third‑party risk assessments, including initial due diligence and ongoing monitoring of vendors.
• Collaborate with internal teams to help create and maintain security policies, standards, and procedures.
• Assist with risk analysis to identify, evaluate, and track risks across the organization.
• Support our annual SOC2 audit by helping to gather evidence, coordinate with stakeholders, and track findings.
• Contribute to the development and maintenance of the GRC program to ensure it aligns with our business objectives.
• Help promote a culture of security and risk awareness through clear communication and collaboration.
• Utilize artificial intelligence and machine learning tools to automate routine tasks, identify patterns, and enhance the efficiency of governance, risk, and compliance processes.
• Conduct internal audits of systems, processes, etc
• Take on ambiguous or unfamiliar problems as they arise, ask the right questions to get oriented quickly, and build the skills needed to solve them.

Skills

GRC experience

Vendor risk management

Policy development

Risk assessment

SOC2 support

Communication skills

English proficiency

Curiosity

Questioning mindset

Education

Bachelor's degree (related field)

Tools

AI/ML tools

Cloud platforms (AWS)

Job description

Forward Financing, a Boston-based fintech, seeks a GRC Analyst to drive third-party risk assessments and strengthen governance, risk, and compliance programs. You will manage vendor due diligence, help shape policies, and support SOC2 audits through evidence collection and stakeholder coordination.

The role emphasizes proactive risk identification, strong communication, and the use of AI/ML tools to automate tasks, with a compensation framework targeting $85k–$108k USD plus a 10% bonus.