# GRC Engineer at Forward Networks

- Company: Forward Networks
- What the company does: Backed by Stanford.
- Company website: https://forwardnetworks.com
- Type: Startups
- Level: Mid level
- Location: Santa Clara, CA
- Work setup: On-site
- Posted: 2026-09-25
- Apply by: 2026-11-09
- Apply: https://job-boards.greenhouse.io/forwardnetworks/jobs/8004881003
- Page: https://www.1752.vc/careers/jobs/forward-networks-grc-engineer/

## About the role

Forward is looking for a GRC Engineer. GRC Engineering is a new discipline: instead of chasing down screenshots every quarter and hoping the auditor doesn't ask too many follow-up questions, you're building scripts and API integrations that pull evidence straight from the source systems and keep it current on their own. If you've spent any time reading about the field, you've probably run into grc.engineering, the GRC Engineering Club, or grcengineer.com.

## What they're looking for

- 3+ years in GRC, compliance, security engineering, IT audit, or equivalent, with on-the-job exposure to control design, risk assessment, AND compliance frameworks
- Experience writing policies and procedures, with a focus on testable and verifiable outcomes
- Time spent doing real work in a GRC/compliance automation platform (Vanta, Drata, Thoropass, Anecdotes, or similar)
- Solid working knowledge of SOC 2. ISO 27001 experience is a plus. ISO 42001 is a possible future endeavor, but curiosity about AI governance is important
- Some exposure to SIEM/SOAR tooling (Splunk, Chronicle, Panther, XSOAR, Tines, whatever you've used) and a basic feel for how incident response actually runs
- The ability to speak to an auditor and an engineer in languages they understand, as both the GRC and engineering skill sets will be utilized

Tags: IT