GRC Analyst

Forward Financing

. Conduct and manage third-party risk assessments, including initial due diligence and ongoing vendor monitoring .

Posted 10/2/2026full-timeRemote • United StatesJunior💰 $85,000 - $108,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in third-party risk management, compliance audits, and the development of security policies and procedures. Proficient in utilizing AI and machine learning tools to enhance GRC efficiency and support organizational risk assessments.

Highest-signal resume keywords

Third-Party Risk ManagementSOC2 Compliance SupportRisk Assessment MethodologiesGRC Program DevelopmentAWS Cloud Understanding

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AnalysisVendor MonitoringPolicy CreationCompliance AuditingDue DiligenceInternal AuditsSecurity StandardsRisk EvaluationAI ToolsMachine Learning

Soft Skills

Strong Organizational SkillsExcellent Communication SkillsIntellectual CuriosityVersatilityProblem-Solving

Industry Keywords

GRCRisk ManagementComplianceSecurity PoliciesVendor Risk AssessmentAudit Evidence GatheringStakeholder CoordinationRisk AwarenessCloud StructuresBusiness Objectives

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Conduct and manage third-party risk assessments, including initial due diligence and ongoing vendor monitoring
Collaborate with internal teams to create and maintain security policies, standards, and procedures
Assist with risk analysis to identify, evaluate, and track organizational risks
Support the annual SOC2 audit by gathering evidence, coordinating with stakeholders, and tracking findings
Contribute to the development and maintenance of the GRC program aligned with business objectives
Promote security and risk awareness through communication and collaboration
Use artificial intelligence and machine learning tools to automate routine tasks, identify patterns, and improve GRC efficiency
Conduct internal audits of systems and processes
Address ambiguous or unfamiliar problems and develop skills to solve them

Requirements

What you’ll need

Bachelor's degree in a related field or equivalent practical experience
1-2+ years of experience in a GRC, risk, or compliance role
Experience with third-party/vendor risk management processes, including conducting due diligence and assessments
Familiarity with creating or maintaining policies, standards, and procedures
Understanding of risk assessment methodologies and ability to help identify and evaluate risks
Experience supporting compliance audits, such as SOC2, by gathering evidence and coordinating with teams
Strong organizational and communication skills
Excellent verbal and written English language skills
Demonstrated versatility across tasks, tools, and priorities
Track record of asking good questions when something is unclear
Intellectual curiosity about risk, compliance, and security
Familiarity with AI and use cases within business settings
Solid understanding of AWS or other cloud structures

Benefits

Comp & perks

Annual target bonus of 10%
Remote work arrangement