GRC Analyst at Forward Financing

Forward Financing is a Boston-based fintech company dedicated to providing fast, flexible working capital to small businesses across the United States. We are a 100% employee-owned organization recognized as a Great Place to Work, and we are looking for a Senior GRC Analyst to join our team and help us maintain our commitment to security and compliance.

Responsibilities

• Lead the development and maintenance of our GRC program to ensure it aligns with our strategic goals and regulatory requirements.
• Partner with subject matter experts to create and update organizational policies, standards, and procedures.
• Design and execute incident response drills to evaluate our internal capabilities and identify areas for improvement.
• Conduct quantitative risk assessments to analyze our risk exposure and collaborate with engineering teams on mitigation strategies.
• Manage our SOC2 audit process, acting as the primary point of contact and ensuring timely remediation of any findings.
• Oversee our third-party risk management program, including vendor due diligence and ongoing performance monitoring.
• Promote a strong culture of risk awareness through team training and stakeholder collaboration.

Must-haves

• A bachelor’s degree in information security, computer science, business administration, or a related field.
• At least 5 years of experience in a GRC role, ideally within a regulated or technology-focused industry.
• Proven success in implementing and maintaining industry-standard policies and procedures.
• Experience designing and documenting incident response exercises.
• Strong analytical skills, including the ability to perform quantitative risk assessments.
• Hands-on experience supporting SOC2 audits and coordinating with auditors.
• Proficiency in managing third-party risks, including vendor assessments and contract compliance.
• Fluency in English.

Benefits

• Remote work flexibility.
• Comprehensive medical, dental, and vision insurance.
• 401k retirement plan.
• Paid time off and flexible working hours.
• Annual budget for professional development.
• Commuter benefits.