Security GRC Analyst I

AvidXchange, Inc.

Security GRC Analyst I at AvidXchange supporting information security governance and compliance. Collaborating with teams on audits, security initiatives, and risk assessments.

Posted 5/28/2026full-timeRemote • 🇺🇸 United StatesJuniorWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Support administration of AvidXchange’s security awareness and phishing simulation program in KnowBe4, including training assignments, campaign design, and coordination.
Assist with building creative cybersecurity awareness communications, campaigns, and recurring outreach activities designed to engage a wide range of teammates and cyber knowledge levels.
Monitor participation, phishing, and engagement metrics to measure program effectiveness and identify improvement opportunities.
Contribute to ongoing enhancement of awareness content to keep training engaging, relevant, and aligned with emerging threats.
Enhance and support our Security Champion Program to empower security-focused individuals to make a difference in their team.
Assist with cybersecurity risk assessments, audits, and third-party/vendor reviews.
Coordinate assessment and audit efforts through documentation, evidence gathering, and cross-functional collaboration.
Track remediation items, risk findings, audit observations, and follow-up efforts across teams.
Develop and maintain cybersecurity metrics, dashboards, and reporting tailored to technical teams, leadership, and executive audiences.
Create visualizations, presentations, and other deliverables using tools such as Power BI, Excel, and PowerPoint.
Coordinate recurring reporting activities related to risk committees, audits, awareness initiatives, and operational metrics.
Analyze data to identify meaningful trends, gaps, and opportunities for program improvement.
Maintain cybersecurity documentation, policies, standards, repositories, and other governance materials.
Assist with customer and vendor due diligence activities, including questionnaire responses, customer assurance communications, and trust center maintenance.
Coordinate business continuity and incident response preparedness efforts, including tabletop exercises and related operational initiatives.

Requirements

What you’ll need

1 – 3 years of experience in cybersecurity, including exposure to one or more of the following areas:
risk management (including third-party/vendor)
compliance and control frameworks
audit and assessments
security awareness programs
reporting, analytics, or operational support functions
Experience developing reports, dashboards, presentations, or visualizations using tools such as Excel or Power BI.
Strong verbal and written communication skills, with the ability to communicate effectively with technical and non-technical stakeholders.
Strong analytical and problem-solving skills, with the ability to identify risks, organize information, and support risk and compliance efforts.
Excellent organizational skills, with the ability to manage multiple priorities, deadlines, and cross-functional initiatives.
Comfortable working collaboratively across technical, operational, and business teams.
Familiarity with industry frameworks and regulations (e.g., NIST, NYDFS, SOC 1/2, PCI, ISO 27001) and comfort mapping controls to requirements.
Experience with or exposure to LogicGate or other GRC/TPRM tools.
Self-motivated and curious, with interest in cybersecurity, risk management, and evolving industry trends.
Relevant certifications such as Security+, ISC2 CC, CISA, or similar certifications are preferred.

Benefits

Comp & perks

18 days PTO*
11 Holidays (8 company recognized & 3 floating holidays)
16 hours per year of paid Volunteer Time Off (VTO)
Competitive Healthcare
401(k) Match: 100% match on the first 3% of your salary, plus 50% match on the next 2%
Parental Leave: 8 weeks 100% paid by AvidXchange**
Discounts on Pet, Home, and Auto insurance
WeeCare Childcare Service: helps teammates find affordable daycare, childcare, and tutors 40% less expensive than traditional daycare centers
Perks at Work: free discount program that provides teammates the opportunity to save on items from electronics, movie tickets, car buying, vacations, and more
Onsite gym fitness center, yoga studio, and basketball court
Tuition Reimbursement up to the federal maximum of $5,250***
Hybrid Workplace Flexibility
Free parking

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecurityrisk managementcompliance frameworksauditsecurity awareness programsreportinganalyticsdata analysisvisualizationsmetrics development

Soft Skills

communication skillsanalytical skillsproblem-solving skillsorganizational skillscollaborationself-motivatedcuriosity

Certifications

Security+ISC2 CCCISA