Senior GRC & Automation Analyst (Cybersecurity)

REPAY; Atlanta (GA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Employee stock purchase plan

Annual bonus program

Job summary

REPAY is seeking a proactive Senior Cybersecurity GRC Analyst to strengthen governance, risk, and compliance with a focus on tool automation. You will automate evidence collection, map controls across frameworks, and drive risk reporting to senior leadership.

Collaboration with Compliance, IT, and Engineering is essential to advance our security posture. Ideal candidates bring hands-on GRC automation, IGA deployment experience, and knowledge of NIST, PCI-DSS, SOC 2, and SOX.

Qualifications

• Bachelor’s degree in a related field.
• 3+ years of experience in GRC roles with hands-on tool implementation and automation.
• Experience automating GRC processes, control testing, evidence collection, and reporting.
• IGA implementations, including access reviews and lifecycle workflows.

Responsibilities

• Automate GRC workflows including control testing, evidence collection, policy attestations, and risk updates.
• Automate evidence collection and risk reporting for senior leadership.
• Collaborate with compliance teams on client questionnaires and due diligence.
• Lead or support IGA implementations and optimization.
• Manage customer-facing Trust Center documentation and questionnaire responses.
• Support phishing simulation and effectiveness metrics in risk reporting.

Skills

GRC automation

IGA implementation

Framework mapping

Stakeholder management

SOX/SOC/PCI

GRC storytelling

Excel advanced

Education

Bachelor’s degree in computer science or information systems

Tools

Hyperproof

Archer

ServiceNow

Saviynt

Okta Identity Governance

Microsoft Entra ID Governance

Job description

REPAY is seeking a proactive Senior Cybersecurity GRC Analyst to strengthen governance, risk, and compliance with a focus on tool automation. You will automate evidence collection, map controls across frameworks, and drive risk reporting to senior leadership.

Collaboration with Compliance, IT, and Engineering is essential to advance our security posture. Ideal candidates bring hands-on GRC automation, IGA deployment experience, and knowledge of NIST, PCI-DSS, SOC 2, and SOX.