[Hiring] GRC Analyst @Forward Financing

Role Description

As a GRC Analyst, you will be a key contributor to our Governance, Risk, and Compliance (GRC) program. In this role, your primary focus will be on our third-party risk management program. You will also be instrumental in maintaining our policies and standards, conducting risk analysis, and supporting our annual SOC2 audit.

• Conduct and manage third-party risk assessments, including initial due diligence and ongoing monitoring of vendors.
• Collaborate with internal teams to help create and maintain security policies, standards, and procedures.
• Assist with risk analysis to identify, evaluate, and track risks across the organization.
• Support our annual SOC2 audit by helping to gather evidence, coordinate with stakeholders, and track findings.
• Contribute to the development and maintenance of the GRC program to ensure it aligns with our business objectives.
• Help promote a culture of security and risk awareness through clear communication and collaboration.
• Utilize artificial intelligence and machine learning tools to automate routine tasks, identify patterns, and enhance the efficiency of governance, risk, and compliance processes.
• Conduct internal audits of systems, processes, etc.
• Take on ambiguous or unfamiliar problems as they arise, ask the right questions to get oriented quickly, and build the skills needed to solve them.

Qualifications

• Bachelor's degree in a related field or equivalent practical experience.
• 1-2+ years of experience in a GRC, risk, or compliance role.
• Experience with third-party/vendor risk management processes, including conducting due diligence and assessments.
• Familiarity with creating or maintaining policies, standards, and procedures.
• Understanding of risk assessment methodologies and the ability to help identify and evaluate risks.
• Experience supporting compliance audits, such as SOC2, by gathering evidence and coordinating with teams.
• Strong organizational and communication skills.
• Excellent verbal and written English language skills.
• Demonstrated versatility — comfortable moving between tasks, tools, and priorities, and willing to stretch into work outside your immediate comfort zone.
• A track record of asking good questions rather than guessing when something is unclear; you know the difference between productive independence and working in the dark.
• Intellectual curiosity about risk, compliance, and security, with a genuine interest in understanding the "why" behind a process, not just the "how."

Requirements

• Familiarity with AI and use cases within business settings.
• A solid understanding of AWS or other cloud structures.

Benefits

• Annual Targeted Salary: $85,000 – $108,000 CAN.
• Annual Target Bonus: 10%.
• Comprehensive total rewards package, including but not limited to: medical, dental, vision, a flexible time-off policy, paid parental leave, RRSP match, wellness reimbursement, volunteering days, annual professional development budget, and charitable donation match.
• Remote-first company with workplace flexibility a top priority.
• Opportunities for in-person collaboration at premiere office locations.