Skip to main content

Forward

GRC Engineer

Santa Clara, CAFrom $140kmidAdded today

About this role

Forward seeks a GRC Engineer to build automation and API integrations that streamline compliance evidence collection and control testing rather than manual processes. The role spans GRC Engineering (SOC 2, ISO 27001/42001, control design, risk management) with expansion into Security Operations (SIEM/SOAR, incident response) after initial automations are established.

What you'll do

  • Design and automate control tests that verify system configurations directly from source systems using scripts and API integrations
  • Write, maintain, and manage review cycles for security policies and procedures with testable, verifiable outcomes
  • Administer and extend GRC platforms (Vanta, Drata, etc.) to continuously monitor control drift and drive remediation
  • Lead SOC 2 Type II audits, establish ISO 27001 foundations, and manage vendor security reviews and due diligence
  • Maintain risk register, conduct risk assessments, and integrate compliance requirements into engineering CI/CD and access workflows
  • Triage security alerts, tune SIEM/SOAR detection rules, and participate in incident response investigations and post-mortems

What they're looking for

  • GRC/compliance automation platforms (Vanta, Drata, Thoropass, or similar)
  • SOC 2 and ISO 27001 compliance frameworks
  • Python, Bash, SQL scripting and API integration
  • SIEM/SOAR tools (Splunk, Chronicle, Panther, XSOAR, Tines)
  • Control design, risk assessment, and audit management
  • Policy and procedure documentation
  • Incident response and endpoint security (EDR, DLP)
  • Linux administration and cloud infrastructure (Terraform, policy-as-code preferred)
Apply with Autofill

Opens the application — the Jobs AI extension fills it for you. Set up autofill

Opens the official application on the employer’s site. No login required.

Forward

Forward Networks builds a network digital twin platform designed for enterprise clients to optimize and manage their network infrastructure. The company is hiring Customer Success Engineers and other roles to provide technical expertise, drive platform adoption, and serve as primary technical contacts for customers across the country.

View all jobs at Forward

Likely interview questions

  • Walk us through a time you automated a manual compliance process—what was the control, what tool or script did you use, and what was the impact?
  • Describe your experience writing security policies. How do you ensure they're testable and verifiable rather than aspirational?
Unlock all 7 questions free — and practice them live →