GRC Analyst: Third-Party Risk & SOC2

Forward Financing LLC; United States; Hybrid; USD 85,000 - 108,000; Full time

Job summary

Forward Financing LLC, a Boston-based fintech, is seeking a GRC Analyst to strengthen third-party risk management, policy maintenance, and SOC2 support. You will evaluate vendors, assist with risk analysis, and help shape the GRC program to align with business goals.

You will collaborate with cross-functional teams, promote security awareness, and leverage AI/ML tools to automate routine tasks and improve governance effectiveness.

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 1–2+ years of experience in a GRC, risk, or compliance role.
• Experience with third-party/vendor risk management processes, including due diligence and assessments.
• Familiarity with creating or maintaining policies, standards, and procedures.
• Understanding of risk assessment methodologies and the ability to help identify and evaluate risks.
• Experience supporting compliance audits, such as SOC2, by gathering evidence and coordinating with teams.
• Strong organizational and communication skills.
• Excellent verbal and written English language skills.
• Demonstrated versatility in handling multiple tasks and priorities.

Responsibilities

• Conduct and manage third-party risk assessments, including initial due diligence and ongoing monitoring of vendors.
• Collaborate with internal teams to help create and maintain security policies, standards, and procedures.
• Assist with risk analysis to identify, evaluate, and track risks across the organization.
• Support our annual SOC2 audit by helping to gather evidence, coordinate with stakeholders, and track findings.
• Contribute to the development and maintenance of the GRC program to align with business objectives.
• Help promote a culture of security and risk awareness through clear communication and collaboration.
• Utilize AI and ML tools to automate routine tasks and enhance GRC processes.
• Conduct internal audits of systems and processes.
• Take on ambiguous problems, ask the right questions, and build necessary skills.

Skills

GRC

Risk assessment

Compliance

Vendor risk management

Policy development

Communication

English language

Analytical thinking

Security awareness

Education

Bachelor's degree or equivalent

Tools

AWS

AI/ML tools

Job description

Forward Financing LLC, a Boston-based fintech, is seeking a GRC Analyst to strengthen third-party risk management, policy maintenance, and SOC2 support. You will evaluate vendors, assist with risk analysis, and help shape the GRC program to align with business goals.

You will collaborate with cross-functional teams, promote security awareness, and leverage AI/ML tools to automate routine tasks and improve governance effectiveness.