ZipRecruiter

Log In

1

Grc Risk Analyst Jobs in Orlando, FL (NOW HIRING)

1 point system

IRM/GRC/TPRM Service Now

Orlando, FL · Remote

We are seeking a Senior ServiceNow Developer with extensive expertise in Integrated Risk Management ... Analytics for GRC dashboards and KRI/KPI reporting. * Familiarity with responsible AI practices ...

1 point system

Sr. ServiceNow Developer

Altamonte Springs, FL · On-site

$50.50 - $69.50/hr

... Risk, and Compliance (GRC), and Third-Party Risk Management (TPRM). This role involves working ... Analytics for GRC dashboards and KRI/KPI reporting. * Familiarity with responsible AI practices ...

Armavel, LLC

Be Seen First

Cybersecurity Analyst (REMOTE)

Orlando, FL · Remote

$85K - $100K/yr

Navigating the VA GRC tool to quickly progress systems through the RMF process. * Developing ... Familiarity with the Risk Management Framework and NIST 800-37. * Federal Information Systems ...

All JobsGrc Risk Analyst JobsGrc Risk Analyst Jobs in Orlando, FL

Grc Risk Analyst information

See Orlando, FL salary details

$14

$37

$61

How much do grc risk analyst jobs pay per hour?

As of Aug 29, 2026, the average hourly pay for grc risk analyst in Orlando, FL is $37.79, according to ZipRecruiter salary data. Most workers in this role earn between $27.84 and $46.01 per hour, depending on experience, location, and employer.

What is a GRC Risk Analyst?

GRC Risk Analysts are professionals who specialize in Governance, Risk, and Compliance (GRC) within an organization. They assess and manage risks related to business operations, ensure compliance with relevant laws and regulations, and help implement policies and controls to mitigate potential threats. These analysts work closely with management to identify vulnerabilities, develop risk management strategies, and monitor the effectiveness of compliance programs. Their goal is to protect the organization from financial, legal, and reputational harm while supporting business objectives.

What are the key skills and qualifications needed to thrive as a GRC Risk Analyst?

To thrive as a GRC (Governance, Risk, and Compliance) Risk Analyst, you need a solid understanding of risk management principles, regulatory requirements, and compliance frameworks, often supported by a degree in information security, business, or a related field. Familiarity with GRC platforms (such as RSA Archer or MetricStream), risk assessment methodologies, and certifications like CRISC or CISA is highly valuable. Strong analytical thinking, attention to detail, and effective communication skills help you identify risks and convey findings to stakeholders. These skills are critical for ensuring organizational compliance, minimizing risk exposure, and supporting informed decision-making.

What are some common challenges a GRC Risk Analyst might face when implementing new risk management frameworks within an organization?

A GRC Risk Analyst often encounters challenges such as resistance to change from stakeholders, integrating new frameworks with existing processes, and ensuring consistent understanding across departments. Aligning risk management practices with organizational goals while adhering to regulatory requirements can also be complex. Success in this role requires strong communication skills, adaptability, and the ability to educate and collaborate with team members from diverse backgrounds.

What is the difference between Grc Risk Analyst vs Compliance Analyst?

AspectGrc Risk AnalystCompliance Analyst
CertificationsISO 31000, FRM, CRISCISO 19600, CCEP, CISA
Work EnvironmentRisk management teams, corporate officesRegulatory departments, corporate offices
Industry UsageFinance, banking, insurance, corporate riskFinancial services, healthcare, manufacturing
Job FocusIdentifying, assessing, and mitigating risks across enterpriseEnsuring compliance with laws and regulations

While both roles involve regulatory and risk considerations, a Grc Risk Analyst focuses on enterprise-wide risk management strategies, whereas a Compliance Analyst concentrates on adherence to specific laws and regulations. Both roles require similar certifications and often work in overlapping industries, but their core responsibilities differ in scope and focus.

What are popular job titles related to Grc Risk Analyst jobs in Orlando, FL?

For Grc Risk Analyst jobs in Orlando, FL, the most frequently searched job titles are:

What job categories do people searching Grc Risk Analyst jobs in Orlando, FL look for?

The top searched job categories for Grc Risk Analyst jobs in Orlando, FL are:

What cities near Orlando, FL are hiring for Grc Risk Analyst jobs?

Cities near Orlando, FL with the most Grc Risk Analyst job openings:

Grc Risk Analyst jobs near you
Infographic showing various Grc Risk Analyst job openings in Orlando, FL as of August 2026, with employment types broken down into 1% As Needed, 86% Full Time, 10% Part Time, and 3% Contract. Highlights an 89% Physical, 4% Hybrid, and 7% Remote job distribution, with an average salary of $78,611 per year, or $37.8 per hour.

IRM/GRC/TPRM Service Now

1 point system

Orlando, FL • Remote

Contractor

Re-posted 21 days ago

Job description

We are seeking a Senior ServiceNow Developer with extensive expertise in Integrated Risk Management (IRM), Governance, Risk, and Compliance (GRC), and Third-Party Risk Management (TPRM). This role involves working within an established team to support, configure, and enhance ServiceNow solutions. The ideal candidate will leverage their development skills and best-practice knowledge to address complex risk and compliance workflows in a dynamic environment.

Key Responsibilities:

  • Develop and deliver ServiceNow solutions across IRM, GRC, and TPRM modules, including Policy & Compliance, Risk, Audit, and Vendor Risk Management.
  • Execute backlog stories from technical design through development, testing, and deployment within an Agile/Scrum framework.
  • Design and configure workflows, business rules, script includes, UI policies, and client scripts to meet risk and compliance use cases.
  • Build and maintain integrations between ServiceNow and third-party systems using REST/SOAP APIs, MID Server, and IntegrationHub.
  • Design and implement AI-assisted capabilities within ServiceNow for functions like intelligent risk mapping, evidence intake, and workflow automation.
  • Participate in all Agile ceremonies, engaging with product managers and stakeholders to clarify requirements and communicate technical solutions.
  • Support UAT and QA cycles, maintain technical documentation, and contribute to code reviews to ensure platform governance standards.
  • Identify technical debt within existing GRC/IRM/TPRM implementations and propose remediation strategies.

Required Qualifications

Experience:

  • A minimum of 5 years of hands-on ServiceNow development experience, with a significant focus on IRM, GRC, and TPRM modules.
  • Demonstrated experience implementing solutions such as Policy & Compliance Management, Risk Management, or Third-Party Risk Management.
  • Proven track record of working in Agile/Scrum environments.

Technical Skills:

  • Proficiency in JavaScript, Glide APIs, Flow Designer, and ServiceNow scripting best practices.
  • Experience with ServiceNow integrations using REST, SOAP, IntegrationHub, and MID Server.
  • Ability to configure various ServiceNow components, including UI, workflows, user roles, and security rules (ACLs).
  • Working knowledge of ServiceNow AI capabilities (e.g., Predictive Intelligence, Virtual Agent, AI Search, Now Assist) and the ability to design AI-enabled workflows.
  • Experience with GRC frameworks such as NIST, ISO 27001, SOC 2, or COBIT.

Preferred Qualifications

  • Experience in regulated industries such as healthcare or financial services.
  • ServiceNow certifications (CIS-RC, CIS-VRM, CAD).
  • Experience with ServiceNow Performance Analytics for GRC dashboards and KRI/KPI reporting.
  • Familiarity with responsible AI practices, including human-in-the-loop review and AI governance in regulated environments.
  • Background in enterprise risk management, information security, or compliance domains.