> Markdown version of [/jobs/ext/3851692-senior-cybersecurity-grc-analyst](https://www.wearedevelopers.com/jobs/ext/3851692-senior-cybersecurity-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cybersecurity GRC Analyst - **Company:** Repay Inc - **Location:** Atlanta, GA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Excel, Application Programming Interfaces (APIs), CompTIA Security+, Cyber Security, Information Systems, Identity and Access Management, Information Technology Operations, Python (Programming Language), Microsoft Office, PCI Data Security Standards, Windows PowerShell, Power BI, Azure Active Directory, Smartsuite, Anti-Phishing, Software Engineering, Data Streaming, Scripting, Cloud Platform System, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, Low-code, RSA Archer Platform, Tools for Reporting, SailPoint, Servicenow - **Published:** October 21, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=77a0ea1919ba9ab0 ## About the Role * Bachelor's degree in computer science, Information Systems, or related field. * Cybersecurity certifications (e.g., CISSP, CISM, CISA) are a plus. * 3+ years of experience in GRC roles, including hands-on GRC tool implementation and automation, preferably within technology organizations in financial services or related industries. * Hands-on experience supporting security compliance programs and the tools behind them across on-premises and cloud environments. * Experience managing projects, including timelines, resources, and stakeholder coordination. * Hands-on experience automating GRC processes and workflows within GRC platforms, such as control testing, evidence collection, and risk and compliance reporting. * Experience implementing Identity Governance and Administration (IGA) solutions (e.g., SailPoint, Saviynt, Okta Identity Governance, Microsoft Entra ID Governance), including access reviews and identity lifecycle workflows. * Experience supporting phishing prevention, simulation, and response programs (e.g., KnowBe4, Proofpoint, Microsoft Defender for Office 365). * Demonstrated ability to assess an existing security technology stack and deliver measurable improvements through optimization, integration, and automation. * Experience managing or implementing a customer-facing Trust Center (e.g., SafeBase, Conveyor, Vanta Trust Center) to share security posture and compliance documentation with customers. Technical Skills: * Strong understanding of SOX, AICPA SOC 1 and SOC 2, PCI-DSS compliance, and cybersecurity frameworks such as NIST CSF and NIST SP800-53. * Proficiency with GRC tools such as Hyperproof, Archer, ServiceNow or similar platforms, including configuring workflows and automations. * Working knowledge of APIs, scripting (e.g., Python, PowerShell), or low-code tools to integrate and automate security and GRC platforms. * Strong understanding of software development practices and cloud environments to build credibility with technical teams. * Advanced expertise in Microsoft Excel and other office tools. * Exceptional presentation and communication skills. * Familiarity with reporting tools such as PowerBI or Sisense is a plus. * Proficiency in risk identification within technology solution architecture and design. * Ability to create and present actionable risk reports and dashboards for senior leadership. Soft Skills: * Demonstrated ability to drive cross-team collaboration and deliver impactful change. * Self-motivated and focused on continuous improvement, bringing solutions and taking ownership of outcomes. * Capable of operating independently and creating or adapting processes to meet organizational needs. * Pragmatic approach, considering broader business contexts and competing priorities. * Analytical thinker with the ability to assess problems, identify root causes, and recommend effective solutions. Collaborative mindset with the ability to work effectively across diverse teams such as Engineering, IT Operations, Security, and Compliance. * ## Description * Governance and Compliance: * Partner with stakeholders to design, document, and enforce security policies, standards, and controls. * Align the organization's security practices with frameworks such as NIST CSF, NIST SP800-53, PCI-DSS, and SOC 2. * Automate the collection, validation, and continuous monitoring of control evidence from source systems and platforms, reducing manual evidence requests and keeping evidence current. * Map controls once to multiple frameworks so that a single piece of automated evidence supports NIST CSF, PCI-DSS, SOC 2, and SOX requirements. * Automate and present risk reports and dashboards for senior management, delivering actionable insights into organizational risk posture and compliance. * Work closely with the corporate compliance team to handle cybersecurity questionnaires from clients. * Improve and automate the process of handling client questionnaires related to cybersecurity. * Act as a subject matter expert during client and regulatory discussions, providing expertise on GRC and risk management topics. Collaborate with platform owners and stakeholders to implement controls and security best practices. * Technology Enablement and Automation: * Drive improvements to the current cybersecurity and GRC technology stack by identifying gaps, redundancies, and integration opportunities, then recommending and implementing enhancements. * Automate GRC workflows within existing GRC platforms, including control testing, evidence collection, policy attestations, risk register updates, and compliance reporting. * Lead or support Identity Governance and Administration (IGA) implementation and optimization, including access certifications, role-based access, joiner/mover/leaver workflows, and segregation of duties controls that support SOX, SOC 2, and PCI-DSS requirements. * Support the phishing program, including simulation and awareness campaigns, user-reported phishing triage, and effectiveness metrics that feed into risk reporting. * Build integrations and automated data flows between GRC, IGA, ticketing, and security tools (via APIs, scripting, or low-code) to reduce manual effort and improve data quality. * Develop business cases, roadmaps, and success metrics for tooling improvements, and track adoption and return on investment. Own and enhance the customer-facing Trust Center, keeping security documentation, certifications (e.g., SOC 2), policies, and standard questionnaire responses to current, and streamlining customer access requests. *