> Markdown version of [/jobs/ext/250050-security-grc-analyst-i](https://www.wearedevelopers.com/jobs/ext/250050-security-grc-analyst-i). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security GRC Analyst I - **Company:** AvidXchange, Inc - **Location:** United States (Remote available) - **Experience:** Starter - **Contract:** Permanent contract - **Skills:** Microsoft Excel, Data Analysis, Microsoft PowerPoint, Power BI, Phishing, Simulation Software - **Published:** May 30, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=de4e9d1eaba1b786 ## About the Role Do you have experience in Customer communication?, * 1 - 3 years of experience in cybersecurity, including exposure to one or more of the following areas: + risk management (including third-party/vendor) + compliance and control frameworks + audit and assessments + security awareness programs + reporting, analytics, or operational support functions * Experience developing reports, dashboards, presentations, or visualizations using tools such as Excel or Power BI. * Strong verbal and written communication skills, with the ability to communicate effectively with technical and non-technical stakeholders. * Strong analytical and problem-solving skills, with the ability to identify risks, organize information, and support risk and compliance efforts. * Excellent organizational skills, with the ability to manage multiple priorities, deadlines, and cross-functional initiatives. * Comfortable working collaboratively across technical, operational, and business teams. * Familiarity with industry frameworks and regulations (e.g., NIST, NYDFS, SOC 1/2, PCI, ISO 27001) and comfort mapping controls to requirements. * Experience with or exposure to LogicGate or other GRC/TPRM tools. * Self-motivated and curious, with interest in cybersecurity, risk management, and evolving industry trends. * Relevant certifications such as Security+, ISC2 CC, CISA, or similar certifications are preferred., **Must be full-time for at least 3 months ***Must be full-time for at least one year ## Description As a Security GRC Analyst I, you will play an important role in supporting and strengthening AvidXchange's information security governance, risk, and compliance program. You will collaborate with teams across the organization to support audits, security awareness initiatives, reporting, risk assessments, and related compliance efforts. This role will contribute to a broad range of operational GRC activities, helping improve cybersecurity visibility, risk management, and program maturity across the organization., * Support administration of AvidXchange's security awareness and phishing simulation program in KnowBe4, including training assignments, campaign design, and coordination. * Assist with building creative cybersecurity awareness communications, campaigns, and recurring outreach activities designed to engage a wide range of teammates and cyber knowledge levels. * Monitor participation, phishing, and engagement metrics to measure program effectiveness and identify improvement opportunities. * Contribute to ongoing enhancement of awareness content to keep training engaging, relevant, and aligned with emerging threats. * Enhance and support our Security Champion Program to empower security-focused individuals to make a difference in their team., * Assist with cybersecurity risk assessments, audits, and third-party/vendor reviews. * Coordinate assessment and audit efforts through documentation, evidence gathering, and cross-functional collaboration. * Track remediation items, risk findings, audit observations, and follow-up efforts across teams., * Develop and maintain cybersecurity metrics, dashboards, and reporting tailored to technical teams, leadership, and executive audiences. * Create visualizations, presentations, and other deliverables using tools such as Power BI, Excel, and PowerPoint. * Coordinate recurring reporting activities related to risk committees, audits, awareness initiatives, and operational metrics. * Analyze data to identify meaningful trends, gaps, and opportunities for program improvement., * Maintain cybersecurity documentation, policies, standards, repositories, and other governance materials. * Assist with customer and vendor due diligence activities, including questionnaire responses, customer assurance communications, and trust center maintenance. * Coordinate business continuity and incident response preparedness efforts, including tabletop exercises and related operational initiatives. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail) - [REST, GraphQL, gRPC, and more: A comparison of modern API styles](https://www.wearedevelopers.com/videos/100247-rest-graphql-grpc-and-more-a-comparison-of-modern-api-styles) - [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)