Senior GRC Analyst
Morganmorganjobsapplynow
At Morgan & Morgan, the work we do matters. For millions of Americans, we’re their last line of defense against insurance companies, large corporations or defective goods. From attorneys in all 50 states, to client support staff, creative marketing to operations teams, every member of our firm has a key role to play in the winning fight for consumer rights. Our over 6,000 employees are all united by one mission: For the People. Senior GRC Analyst Morgan & Morgan | Risk & Resilience Program Reports To: Director of Business Continuity Department: Information Security / Risk & Resilience Type: Full-Time The Opportunity Morgan & Morgan is one of the largest plaintiff law firms in the country — 6,000+ employees, 100+ offices, and a caseload that doesn’t wait. The Risk & Resilience program is in full build mode: governance structure is set, the first BIA is complete, and the frameworks are mapped. What’s missing is execution capacity. This is not a maintenance role. You’re joining at the ground floor of a GRC program that needs to be built from a standing start — TPRM methodology, policy lifecycle, risk register calibration, awareness program design. You’ll own workstreams end-to-end, not coordinate them. You report directly to the Director of Business Continuity, who owns the GRC function and sets program direction. If you want to inherit a mature program and tune it, this isn’t for you. If you want to build one — with real ownership, real scope, and a clear path to being the person who shapes how risk is managed across a national law firm — read on. What You’ll Own Third-Party Risk Management Build and own the end-to-end TPRM process: risk tiering, assessment criteria, and escalation thresholds — from scratch Lead risk assessments for the firm’s highest-exposure vendor relationships: case management, e-discovery, payment processing, and others Bring risk acceptance and remediation recommendations to the Director; own the analysis behind the decision Policy Lifecycle Run the full policy lifecycle: drafting, review cadence, approval workflows, and firm-wide attestation tracking Write policy content directly — you’re not inheriting a library, you’re building it, translating framework requirements into language that works for a law firm Identify and close policy gaps against ISO 27001, NIST CSF, and CIS v8.1 before they become audit findings Risk Management Own the enterprise risk register: methodology, scoring calibration, and quarterly review cadence Lead control testing and gap assessment in Vanta; design remediation plans Spot emerging risk trends and bring recommendations Security Awareness Assist with the design of the security awareness program strategy: content calendar, phishing simulation progression, targeted training for high-risk roles, and Program Champions Analyze effectiveness data and adjust the program based on results, not just completion rates Audit & Compliance Readiness Serve as point of contact for cyber insurance audits, major client security due diligence, and regulatory inquiries Own the audit calendar and evidence readiness posture — you’re not responding to requests as they land, you’re ahead of them Reporting & Program Visibility Build and maintain the GRC reporting suite for CIO-level consumption: risk posture snapshots, control testing results, TPRM exposure summaries Identify maturity gaps against framework requirements and bring prioritized roadmap recommendations to the Director Cross-Program Coordination Interface with the BC/DR and Crisis Management program on control alignment, vendor dependencies surfaced in BIAs, and recovery capability assumptions Coordinate with the Privacy function (in build) on data inventory, state privacy law obligations (FL, CA, NY, and others), and third-party data handling risks Once the GRC Analyst is hired, serve as a working mentor without formal management authority What We’re Looking For 4–6+ years in GRC, IT audit, compliance, or information security Deep hands-on experience in a GRC platform; Vanta strongly preferred Strong working knowledge of ISO 27001, NIST CSF, and CIS v8.1; you’ve mapped controls across multiple frameworks at the same time ISC2 CC/CCSP or ISACA CRISC/CISA required, or other ISC2 or ISACA related certificates (CISSP, CISM) Direct experience leading external audits or client security due diligence as primary point of contact, including findings negotiation You’ve designed a security awareness program Comfortable operating independently Bachelor’s degree in Information Security, Risk Management, Computer Science, or related field; equivalent experience considered Benefits Morgan & Morgan is a leading personal injury law firm dedicated to protecting the people, not the powerful. For full-time employees, we offer an excellent benefits package including medical and dental insurance, 401(k) plan, paid time off and paid holidays. Equal Opportunity Statement Morgan & Morgan provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. E-Verify This employer participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. If E-Verify cannot confirm that you are authorized to work, this employer is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before the employer can take any action against you, including terminating your employment. Employers can only use E-Verify once you have accepted a job offer and completed the I-9 Form. #J-18808-Ljbffr
$80k - $100k
...Cybersecurity Compliance Analyst – Orlando, FL Salary: $80,000–$100,000 base + 25% bonus Location: Onsite in Orlando, FL 32810... ...What You Bring: • 6+ years of experience in cybersecurity, GRC, IT compliance, cyber risk, audit, or related environments • Strong...SuggestedRelocation packageShift work- ...and learning solutions that help personnel understand expectations, make informed decisions, and support regulatory readiness. This senior individual contributor role serves as a key connector across education, communications, and governance programs. This role will...SeniorFull timeWork at officeWork from homeRelocation
- HETI is seeking consultants with at least 10 years of health & safety experience, including general liability insurance coverage for construction, manufacturing, oil & gas, environmental and fleet management. We service the insurance industry with risk assessments and industrial...SeniorRemote jobWork from homeFlexible hours
- Merlin is seeking a Sr. Leave & Benefits Specialist to oversee complex leave cases and benefits administration. This hybrid role based in Orlando requires 4+ years of relevant experience, strong knowledge of leave laws, and excellent communication skills. Responsibilities...Senior
- Evermore in Orlando is seeking a Revenue Manager to support revenue growth through smart pricing strategies and market analysis. As part of the team, you will optimize room inventory distribution and enhance revenue performance across channels. The ideal candidate should...Senior
- ...Comprehensive and Interactive Wellness Program Job Summary: The IT GRC Analyst is responsible for supporting Globalstar's information... ...elevate control exceptions, discrepancies, and potential gaps to senior team members for evaluation and remediation. Monitor compliance...Temporary workWork experience placementWork at office
- ...ClinDCast LLC is seeking an experienced Senior Epic Resolute Revenue Cycle Analyst/Administrator in Orlando, Florida. The candidate will support, optimize, and enhance Epic Hospital Billing (HB), Professional Billing (PB), and Single Billing Office (SBO) applications....SeniorWork at office
- A community-focused bank located in Winter Park is seeking a Senior Compliance Officer to oversee regulatory compliance and internal policies. The role involves developing compliance programs, monitoring regulatory changes, and conducting internal audits. Ideal candidates...SeniorFull time
- ...exceptional service and strengthening connections within the community. Role Description This is a full-time, on-site role for a Senior Compliance Officer, located in Winter Park, FL. The Senior Compliance Officer will oversee and ensure adherence to all regulatory compliance...SeniorFull timeLocal area
- CFS is seeking an Insurance & Risk Analyst in the Greater Orlando Area to own enterprise-wide insurance and risk programs across multiple businesses, reporting directly to executive leadership. You will manage commercial insurance programs, renewals, policies, endorsements...SeniorLocal area
$120k - $150k
...Risk Manager / Senior Risk Analyst Location: Atlanta, Orlando or Tampa (Hybrid) — Remote flexibility available for the right candidate Division : Dealer General Warranty About CV Family & Dealer General Warranty The CV Family Organization is a privately held...SeniorContract workRemote work$85k - $90k
...due to a disability, please contact ****@*****.***. Seniority level Seniority level Associate Employment type Employment type... ...United States $55,000.00-$90,000.00 2 days ago Senior Compliance Analyst, Duals (D-SNP) Products Florida, United States $68,700.00-$123,...SeniorFull timeContract workLocal areaRemote work$100k - $130k
Onterris is seeking a Senior Environmental Project Manager located in Orlando, FL. The role carries a salary range from $100K to $130K, commensurate with experience, skills, and location. You will lead diverse environmental compliance projects and supervise staff, coordinating...Senior- General Description: This individual will support all our current and future states in all product lines of insurance by accessing data, performing rate reviews, reserve analysis, and other actuarial studies; preparing rate filings and responding to inquiries from regulatory...Senior
- Dignitas Technologies, a By Light company, offers a wide range of services in the military modeling, simulation, and training (MS&T) industry. The ideal candidate will manage large government program financials via Earned Value Management, including developing and maintaining...Senior
- AdventHealth in Altamonte Springs, FL is seeking an experienced Epic analyst to maintain clinical and business systems supporting patient care delivery. This role analyzes business problems and collaborates with clinicians to design, build, test, train, implement, and maintain...Senior
- Dignitas Technologies, a By Light company, seeks a senior program financial manager to command Earned Value Management for a large DoD/M&S program in the Orlando area. You will build and maintain an Integrated Master Schedule and partner with PM, finance, and accounting...SeniorFor subcontractor
- Orlando Health is seeking an Epic Products Analyst, Lead to apply advanced knowledge of healthcare operations and Epic configuration across the software life cycle. You will design, implement, test, and maintain complex Epic configurations and collaborate with stakeholders...Senior
- V2X Inc. seeks a Security Operations Center Analyst II in Orlando, Florida, to lead cybersecurity operations, incident response, and defensive measures across centralized and remote locations. The role supports the Warfighter Training Readiness Solutions program with 24...SeniorRemote work
- SeaWorld Parks & Entertainment is seeking a Senior Analyst, In-Park Revenue Analytics & Strategy in Orlando to drive data‑driven decisions across Food & Beverage, Retail, and Zoo operations. You will analyze guest behavior, pricing, and promotional effectiveness, building...Senior
- Lockheed Martin in Orlando, Florida seeks a Proposal Analyst Stone-Fulltime to shape bid strategies, coordinate cost and schedule data, and present financial analyses to senior leadership. You will lead pricing activities, develop business-case analyses, and gather inputs...SeniorFull timeFlexible hours
- Quest National Services in Orlando, Florida is looking for a Senior Biller Manager to oversee client accounts and billing functions. The role requires strong leadership skills, with responsibilities including managing a billing team, ensuring compliance, and maintaining...SeniorWork at office
- One Alliance North America Insurance Company is seeking a Senior Actuarial Analyst in Orlando, FL. In this full-time position, you will support various insurance product lines through data analysis, pricing projects, and regulatory compliance tasks. You will perform rate...SeniorFull time
- A technology solutions provider is seeking a Senior Business Analyst for a contract assignment in Orlando, FL. The successful candidate will have at least 5 years of experience in finance and data analytics, and will be responsible for advancing reporting processes, maintaining...SeniorFull timeContract work
- ...Senior Analyst, In-Park Revenue Analytics & StrategySeaWorld is a world-renowned leader in the themed-park and entertainment industry. Our success is built on a passion for caring for animals and a dedication to delivering positive, memorable experiences to people from...SeniorFlexible hours
- In short, we apply our problem-solving skills to complex interdisciplinary problems that occur within or at the intersection of organizations, operations, and technology. We support sponsor projects across the defense and public sectors including military logistics, radio...Senior
- Capco’s Global Internal Applications team in Orlando, FL powers HR, recruitment and financial systems for 9,000+ colleagues worldwide. You’ll provide functional and technical support, help implement new internal apps, and drive improvements across a dynamic, global technology...SeniorWork at officeWorldwide
$47 - $52 per hour
...Proven success in streamlining and modernizing BI/reporting environments Excellent communication and stakeholder management skills Seniority level Mid-Senior level Employment type Contract Job function Information Technology Industries Staffing and Recruiting IT Services...SeniorContract work- American Management Services is seeking a Senior Executive Analyst to make a real difference in the lives of business owners across the nation from our Orlando-base. You’ll apply financial and operational insight to uncover root causes and implement real-time, profit-guaranteed...Senior
- Raucy in the United States is seeking a Workers’ Compensation Senior Analyst to lead a regional program for a major aviation client. You will own strategy, execution, and performance across the claims lifecycle, partnering with Risk Management, insurers, and TPAs to drive...Senior
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Senior GRC Analyst. Be the first to apply!
- srs distribution Orlando, FL
- senior associate architect Orlando, FL
- senior dynamics crm developer Orlando, FL
- senior application security Orlando, FL
- senior account director Orlando, FL
- senior supervisor Orlando, FL
- senior plumbing designer Orlando, FL
- senior sales representative Orlando, FL
- senior advisor Orlando, FL
- senior cloud data engineer Orlando, FL


