GOVERNANCE, RISK, & COMPLIANCE ANALYST - 72003924

Requisition No: 878617 

Agency: Management Services

Working Title: GOVERNANCE, RISK, & COMPLIANCE ANALYST - 72003924

 Pay Plan: Career Service

Position Number: 72003924 

Salary:  $70,000.00 - $87,500.00 

Posting Closing Date: 07/10/2026 

Total Compensation Estimator Tool

GRC Analyst
Florida Digital Service
State of Florida Department of Management Services
This position is located in Tallahassee, FL
 

 

The Governance, Risk, & Compliance (GRC) Analyst supports enterprise-wide governance, risk, and compliance functions across data, cybersecurity, project management oversight, and enterprise architecture domains. This role advances statewide Digital Forward initiatives and ensures alignment with FLDS, NIST, and DAMA-DMBOK frameworks.

 

DUTIES & RESPONSIBILITIES 
Governance & GRC Program Activities

• Support GRC operations across multiple domains (cybersecurity, data governance, enterprise architecture, and project oversight). 
• Assist in implementation and adoption of a Unified Enterprise GRC Solution, enabling centralized risk tracking, compliance monitoring, and reporting. 
• Participate in governance activities including development, review, and maintenance of policies, standards, procedures, and guidelines. 
• Develop and maintain templates, playbooks, and process guides aligned with FLDS requirements, NIST CSF, and DAMA-DMBOK. 
• Support enterprise governance forums, working groups, and cross-agency collaboration efforts. 
• Assist in development and delivery of training, awareness materials, and governance documentation.

 

Risk Management & Assessment Activities

• Support development, facilitation, and tracking of:
  o    Triennial enterprise cybersecurity risk assessments
  o    Annual agency strategic and operational plans
  o    Risk remediation plans and recommendations
• Track risk findings, remediation progress, and maturity improvements across agencies.
• Integrate vulnerability, audit, and assessment findings into enterprise risk management processes.
• Assist agencies in identifying risks, prioritizing mitigation strategies, and aligning with statewide standards.
• Contribute to maturity model assessments that measure agency capability and progress over time.

 

Compliance & Audit Support Activities

• Support compliance monitoring and audit readiness across multiple regulatory domains.
• Assist with internal and external audits, documentation collection, and remediation tracking.
• Analyze compliance against:
  o    FLDS policies and standards
  o    NIST Cybersecurity Framework
  o    DAMA-DMBOK data governance practices
• Facilitate coordination with agencies and stakeholders for audit activities and reporting.
• Support development of compliance metrics, dashboards, and reporting capabilities.

 

Data Governance & Enterprise Initiatives

• Support implementation of a Data Governance Framework that promotes secure data sharing and collaboration. 
• Assist with development of governance artifacts including: 

o    Data standards 
o    Data sharing agreements 
o    Authoritative data source identification 

• Contribute to enterprise data maturity assessments and data literacy initiatives. 
• Support federated governance efforts that balance enterprise oversight with agency autonomy.

 

Digital Forward Initiative Support

Support key statewide initiatives including:

• Strengthening enterprise cybersecurity maturity through a unified GRC solution
• Establishing maturity models for continuous improvement
• Implementing secure data sharing and interoperability frameworks
• Increasing operational technology (OT