GRC Analyst

Forward Financing

. Conduct and manage third-party risk assessments, including initial due diligence and ongoing vendor monitoring .

Posted 10/2/2026full-timeRemote • CanadaJunior💰 CA$85,000 - CA$108,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in conducting third-party risk assessments and supporting compliance audits, particularly SOC2, while effectively collaborating with internal teams to develop and maintain security policies and procedures. Proficient in utilizing AI and machine learning tools to enhance GRC processes and improve organizational risk management.

Highest-signal resume keywords

Third-Party Risk ManagementSOC2 Compliance SupportRisk Assessment MethodologiesGRC Program DevelopmentVendor Due Diligence

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AnalysisVendor MonitoringPolicy CreationCompliance AuditsInternal AuditsRisk EvaluationEvidence GatheringAI ToolsMachine LearningCloud Structures

Soft Skills

Clear CommunicationCollaborationProblem SolvingVerbal CommunicationWritten Communication

Tools & Technologies

GRC ToolsAI ToolsMachine Learning ToolsAWS

Industry Keywords

Third-Party Risk AssessmentsVendor Risk ManagementSecurity PoliciesStandards and ProceduresRisk Awareness

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Conduct and manage third-party risk assessments, including initial due diligence and ongoing vendor monitoring
Collaborate with internal teams to create and maintain security policies, standards, and procedures
Assist with risk analysis to identify, evaluate, and track organizational risks
Support the annual SOC2 audit by gathering evidence, coordinating with stakeholders, and tracking findings
Contribute to developing and maintaining the GRC program in alignment with business objectives
Promote security and risk awareness through clear communication and collaboration
Use artificial intelligence and machine learning tools to automate routine tasks, identify patterns, and improve GRC process efficiency
Conduct internal audits of systems and processes
Address ambiguous or unfamiliar problems, ask clarifying questions, and develop skills to solve them

Requirements

What you’ll need

Bachelor's degree in a related field or equivalent practical experience
1–2+ years of experience in a GRC, risk, or compliance role
Experience with third-party/vendor risk management processes, including conducting due diligence and assessments
Familiarity with creating or maintaining policies, standards, and procedures
Understanding of risk assessment methodologies and ability to identify and evaluate risks
Experience supporting compliance audits, such as SOC2, by gathering evidence and coordinating with teams
Excellent verbal and written English language skills
Familiarity with AI and business use cases (nice to have)
Solid understanding of AWS or other cloud structures (nice to have)
Authorization to work for any employer in Canada
Must answer whether Canadian work authorization or sponsorship is required

Benefits

Comp & perks

10% annual target bonus
Medical insurance
Dental insurance
Vision insurance
Flexible time-off policy
Paid parental leave
RRSP match
Wellness reimbursement
Volunteering days
Annual professional development budget
Charitable donation match
Remote-first workplace flexibility
Access to premiere office locations for in-person collaboration
Virtual and in-person team events and celebrations