GRC Analyst: Third-Party Risk & SOC2 Focus

Forward Financing; Ontario (CA); Remote; USD 60,000 - 76,000; Full time

Benefits offered by this job

Remote-first culture

Medical and dental insurance

Vision coverage

RRSP match

Wellness reimbursement

Paid parental leave

Professional development budget

Volunteer days

Charitable donation match

Office locations

Job summary

Forward Financing is seeking a GRC Analyst to own third‑party risk assessments, maintain security policies, and support SOC2 audits. You will evaluate vendor risks, collaborate with teams to update standards, and help align the GRC program with business goals.

The role emphasizes strong organizational skills, clear communication, and a proactive, curious approach to risk and security. This is a remote-friendly position with competitive total rewards.

Qualifications

• Bachelor's degree in a related field or equivalent practical experience.
• 1–2+ years of experience in a GRC, risk, or compliance role.
• Experience with third‑party/vendor risk management processes, including due diligence and assessments.
• Familiarity with creating or maintaining policies, standards, and procedures.
• Understanding of risk assessment methodologies and the ability to help identify and evaluate risks.
• Experience supporting compliance audits, such as SOC2, by gathering evidence and coordinating with teams.
• Strong organizational and communication skills.
• Excellent verbal and written English language skills.

Responsibilities

• Conduct and manage third‑party risk assessments, including initial due diligence and ongoing monitoring of vendors.
• Collaborate with internal teams to help create and maintain security policies, standards, and procedures.
• Assist with risk analysis to identify, evaluate, and track risks across the organization.
• Support our annual SOC2 audit by helping to gather evidence, coordinate with stakeholders, and track findings.
• Contribute to the development and maintenance of the GRC program to ensure it aligns with our business objectives.
• Help promote a culture of security and risk awareness through clear communication and collaboration.
• Utilize AI/ML tools to automate routine tasks, identify patterns, and enhance governance processes.
• Conduct internal audits of systems and processes.
• Take on ambiguous problems, ask the right questions, and build the skills to solve them.

Skills

GRC experience

Vendor risk management

Policy development

SOC2 audit support

Risk assessment

Communication skills

English proficiency

Education

Bachelor's degree or equivalent

Job description

Forward Financing is seeking a GRC Analyst to own third‑party risk assessments, maintain security policies, and support SOC2 audits. You will evaluate vendor risks, collaborate with teams to update standards, and help align the GRC program with business goals.

The role emphasizes strong organizational skills, clear communication, and a proactive, curious approach to risk and security. This is a remote-friendly position with competitive total rewards.