GRC Analyst: Cybersecurity, Data Governance & Compliance

State of Florida; Tallahassee (FL); On-site; USD 70,000 - 88,000; Full time

Job summary

The State of Florida Department of Management Services seeks a Governance, Risk, and Compliance (GRC) Analyst in Tallahassee to support enterprise-wide governance, risk, and compliance programs and to advance statewide Digital Forward initiatives in line with NIST CSF, NIST 800-53, and DAMA-DMBOK.

The role covers cybersecurity, data governance, enterprise architecture, and project oversight; you will help implement a Unified Enterprise GRC Solution, develop policies, standards, playbooks, and

Qualifications

• Experience in governance, risk, compliance, audit, or IT-related functions.
• Experience with frameworks such as NIST, ISO, or data governance standards.
• Ability to support enterprise-level initiatives and cross-functional collaboration.

Responsibilities

• Support GRC operations across cybersecurity, data governance, enterprise architecture, and project oversight.
• Assist in implementation and adoption of a Unified Enterprise GRC Solution, enabling centralized risk tracking, compliance monitoring, and reporting.
• Develop, review, and maintain policies, standards, procedures, and guidelines.
• Develop templates, playbooks, and process guides aligned with FLDS requirements, NIST CSF, and DAMA-DMBOK.
• Support governance forums and cross-agency collaboration.
• Deliver training and governance documentation.

Skills

GRC principles

Data governance

Cybersecurity basics

Risk assessment

Policy development

Education

Bachelor’s degree in information systems / cybersecurity / data management / public administration

Graduate degree preferred

Tools

GRC tools

Enterprise risk platforms

Job description

The State of Florida Department of Management Services seeks a Governance, Risk, and Compliance (GRC) Analyst in Tallahassee to support enterprise-wide governance, risk, and compliance programs and to advance statewide Digital Forward initiatives in line with NIST CSF, NIST 800-53, and DAMA-DMBOK.

The role covers cybersecurity, data governance, enterprise architecture, and project oversight; you will help implement a Unified Enterprise GRC Solution, develop policies, standards, playbooks, and