Senior Cybersecurity GRC Analyst

REPAY ("Realtime Electronic Payments" / NASDAQ TICKER: RPAY) is an established and fast-growing publicly traded financial technology and payment processing company headquartered in Atlanta, Georgia, with offices across the country. REPAY enables its customers to accept payments anytime, anywhere, and through any channel while providing a secure, seamless, and enjoyable payment experience for the end consumers. REPAY offers a comprehensive suite of electronic payment and funding solutions, including debit and credit card processing, ACH processing, Instant Funding, and electronic bill payment systems with full IVR, text, and mobile capabilities.

The scalability of its products allow merchants of all sizes to add an instant arsenal of intelligent payment technology solutions to their businesses without significant development costs or infrastructure investments.

We are seeking a proactive and detail-oriented Senior Cybersecurity GRC Analyst with expertise in Governance, Risk, and Compliance (GRC) and a strong emphasis on tool automation. The ideal candidate will have extensive experience in GRC tool automation, Identity Governance and Administration (IGA) implementation, and security compliance. Reporting directly to the Manager of Cybersecurity GRC, this position plays a key role in strengthening the tools and automation that support the company’s governance, risk, and compliance programs.

This role will focus on improving and optimizing the current security technology stack, including GRC tool automation, Identity Governance and Administration (IGA) implementation, phishing program effectiveness, and Trust Center management.

• Governance and Compliance:
  Partner with stakeholders to design, document, and enforce security policies, standards, and controls.
• Align the organization’s security practices with frameworks such as NIST CSF, NIST SP800-53, PCI-DSS, and SOC 2.
• Automate the collection, validation, and continuous monitoring of control evidence from source systems and platforms, reducing manual evidence requests and keeping evidence current.
• Map controls once to multiple frameworks so that a single piece of automated evidence supports NIST CSF, PCI-DSS, SOC 2, and SOX requirements.
• Automate and present risk reports and dashboards for senior management, delivering actionable insights into organizational risk posture and compliance.
• Work closely with the corporate compliance team to handle cybersecurity questionnaires from clients.
• Improve and automate the process of handling client questionnaires related to cybersecurity.
• Act as a subject matter expert during client and regulatory discussions, providing expertise on GRC and risk management topics.
• Collaborate with platform owners and stakeholders to implement controls and security best practices.
• Technology Enablement and Automation:
  Drive improvements to the current cybersecurity and GRC technology stack by identifying gaps, redundancies, and integration opportunities, then recommending and implementing enhancements.
• Automate GRC workflows within existing GRC platforms, including control testing, evidence collection, policy attestations, risk register updates, and compliance reporting.
• Lead or support Identity Governance and Administration (IGA) implementation and optimization, including access certifications, role-based access, joiner/mover/leaver workflows, and segregation of duties controls that support SOX, SOC 2, and PCI-DSS requirements.
• Support the phishing program, including simulation and awareness campaigns, user-reported phishing triage, and effectiveness metrics that feed into risk reporting.
• Build integrations and automated data flows between GRC, IGA, ticketing, and security tools (via APIs,…