Senior GRC & Identity Automation Analyst

REPAY Management Services

Atlanta (GA)

On-site

USD 90,000 - 130,000

Full time

7 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Healthcare premiums covered for the/1

Life insurance

Disability insurance

401(k) with match

Employee Stock Purchase Plan

Annual Bonus Program

Job summary

REPAY seeks a proactive Senior Cybersecurity GRC Analyst to strengthen governance, risk, and compliance programs. You will automate evidence collection, map controls across frameworks, and lead IGA implementations to support SOX, SOC 2, and PCI‑DSS.

Collaborate with stakeholders to craft risk dashboards and client-facing security documentation. You will engage with phishing programs, build GRC integrations, and drive automation across the security technology stack while reporting to the Manager

Qualifications

Bachelor’s degree in computer science, Information Systems, or related field.
Cybersecurity certifications (e.g., CISSP, CISM, CISA) are a plus.
3+ years of experience in GRC roles, including hands‑on GRC tool implementation and automation, preferably within technology organizations in financial services or related industries.
Hands‑on experience supporting security compliance programs and the tools behind them across on‑premises and cloud environments.
Experience managing projects, including timelines, resources, and stakeholder coordination.
Hands‑on experience automating GRC processes and workflows within GRC platforms, such as control testing, evidence collection, and risk and compliance reporting.
Experience implementing Identity Governance and Administration (IGA) solutions (e.g., SailPoint, Saviynt, Okta Identity Governance, Microsoft Entra ID Governance), including access reviews and identity lifecycle workflows.
Experience supporting phishing prevention, simulation, and response programs (e.g., KnowBe4, Proofpoint, Microsoft Defender for Office 365).
Demonstrated ability to assess an existing security technology stack and deliver measurable improvements through optimization, integration, and automation.
Experience managing or implementing a customer‑facing Trust Center (e.g., SafeBase, Conveyor, Vanta Trust Center) to share security posture and compliance documentation with customers.

Responsibilities

Governance and Compliance: Design, document, and enforce security policies, standards, and controls with stakeholders.
Align security practices with NIST CSF, NIST SP800‑53, PCI‑DSS, and SOC 2.
Automate collection, validation, and monitoring of control evidence from source systems and platforms.
Map controls once to multiple frameworks so a single piece of evidence supports NIST CSF, PCI‑DSS, SOC 2, and SOX.
Automate and present risk reports and dashboards for senior management with actionable insights.
Collaborate with the corporate compliance team to handle cybersecurity questionnaires from clients.
Improve and automate customer questionnaires related to cybersecurity.
Act as SME during client/regulatory discussions on GRC and risk management topics.
Collaborate with platform owners to implement controls and security best practices.
Drive improvements to the GRC tech stack by identifying gaps and integration opportunities.