GRC Architect: Build & Own Enterprise Risk Program

Morganmorganjobsapplynow; Orlando (FL); On-site; USD 80,000 - 100,000; Full time

Benefits offered by this job

Medical and dental insurance

401(k) plan

Paid time off

Paid holidays

Job summary

Morgan & Morgan in Orlando is looking for a Senior GRC Analyst to build and manage the Governance, Risk, and Compliance program from the ground up. The ideal candidate will have strong experience with risk assessments and policy authoring, reporting directly to the Director of Business Continuity.

This role includes key responsibilities such as managing Third-Party Risk Management processes, developing security awareness programs, and ensuring audit and compliance readiness across a national law firm.

The candidate must possess relevant certifications and a Bachelor’s degree, with strong experience in GRC platforms like Vanta highly preferred.

Qualifications

• 4–6+ years in GRC, IT audit, compliance, or information security.
• Direct experience leading external audits or client security due diligence.
• Strong working knowledge of ISACA or ISC2 certifications required.

Responsibilities

• Build and own the end-to-end TPRM process.
• Run the full policy lifecycle: drafting, review cadence, approval workflows.
• Own the enterprise risk register and control testing.

Skills

GRC platform experience

Hands-on risk management

ISO 27001

NIST CSF

CIS v8.1

Security awareness program design

Strong analytical skills

Education

Bachelor’s degree in Information Security, Risk Management, or related field

Tools

Vanta

Job description

Morgan & Morgan in Orlando is looking for a Senior GRC Analyst to build and manage the Governance, Risk, and Compliance program from the ground up. The ideal candidate will have strong experience with risk assessments and policy authoring, reporting directly to the Director of Business Continuity.

This role includes key responsibilities such as managing Third-Party Risk Management processes, developing security awareness programs, and ensuring audit and compliance readiness across a national law firm.

The candidate must possess relevant certifications and a Bachelor’s degree, with strong experience in GRC platforms like Vanta highly preferred.