ZipRecruiter

Log In

1

Hitrust Jobs in Virginia (NOW HIRING)

VHC Health

Director, Cybersecurity Compliance

Arlington, VA · On-site

$151K - $288K/yr

HITRUST CCSFP, preferred Additional At VHC Health, every role contributes to exceptional care, better outcomes, and stronger communities. \nIn addition to your base compensation, VHC Health offers a ...

Elevance Health

Info Security Advisor (US)

Ashburn, VA · On-site

$112K - $193K/yr

Proven experience with pre-sales RFPs and bids, knowledge of NIST 800-53, ISO 27001, HITRUST strongly preferred. * Proficiency with technology tools and systems, including SailPoint, ServiceNow, SAST ...

New

Elevance Health

Info Security Advisor (US)

Ashburn, VA · On-site

$112K - $193K/yr

Proven experience with pre-sales RFPs and bids, knowledge of NIST 800-53, ISO 27001, HITRUST strongly preferred. * Proficiency with technology tools and systems, including SailPoint, ServiceNow, SAST ...

New

Verato

Controller [Finance]

Mclean, VA · On-site

Lead external audit (financial and, if applicable, SOC 2/HITRUST support) as primary liaison with auditors * Manage AP, AR, payroll, and financial / treasury operations; own cash management and ...

next page

Showing results 1-20

All JobsHitrust JobsHitrust Jobs in Virginia

Hitrust information

See Virginia salary details

$69.5K

$119K

$176.5K

How much do hitrust jobs pay per year?

As of Aug 7, 2026, the average yearly pay for hitrust in Virginia is $119,031.00, according to ZipRecruiter salary data. Most workers in this role earn between $94,821.00 and $142,475.00 per year, depending on experience, location, and employer.

What skills and qualifications are needed for a HITRUST position?

To thrive in a HITRUST professional role, you need a robust understanding of information security, healthcare compliance, and risk assessment, typically supported by a relevant degree or certifications such as HITRUST Certified CSF Practitioner (CCSFP). Proficiency with regulatory frameworks like HIPAA, GRC tools, and HITRUST’s MyCSF platform is crucial. Strong attention to detail, analytical thinking, and effective communication are key soft skills for working with cross-functional teams and translating complex requirements. These skills enable professionals to ensure organizational compliance, manage complex security assessments, and foster trust in healthcare data protection programs.

What does a HITRUST professional do?

As a HITRUST professional, you will be responsible for guiding organizations through the HITRUST CSF certification process, conducting comprehensive risk and gap assessments, and creating remediation plans to address compliance issues. Your work will often involve collaborating with IT, compliance, and executive teams to implement policies, improve security controls, and ensure adherence to industry standards like HIPAA and HITECH. You can also expect to manage regular audits, prepare documentation, and educate staff on emerging security requirements. This role plays a key part in maintaining regulatory compliance and safeguarding sensitive patient data.

What is a HITRUST?

A HITRUST job typically involves working with the HITRUST Common Security Framework (CSF) to help organizations achieve and maintain regulatory compliance, data security, and risk management. Professionals in this role may conduct risk assessments, implement security controls, and guide organizations through the HITRUST certification process. Common job titles include HITRUST Consultant, Compliance Analyst, and Security Auditor. These roles require expertise in cybersecurity, regulatory frameworks, and industry best practices.

What are the most commonly searched types of Hitrust jobs in Virginia? The most popular types of Hitrust jobs in Virginia are:
What are popular job titles related to Hitrust jobs in Virginia? For Hitrust jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Hitrust jobs in Virginia look for? The top searched job categories for Hitrust jobs in Virginia are:
Hitrust jobs near you
Infographic showing various Hitrust job openings in Virginia as of August 2026, with employment types broken down into 85% Full Time, 10% Part Time, and 5% Contract. Highlights an 62% Physical, 5% Hybrid, and 33% Remote job distribution, with an average salary of $119,031 per year, or $57.2 per hour.

Director, Cybersecurity Compliance

VHC Health

Arlington, VA • On-site

$151K - $288K/yr

Full-time

Medical, Dental, Vision, Retirement

Re-posted 20 days ago

VHC Health rating

8.0

Company rating: 8.0 out of 10

Based on 34 frontline employees who took The Breakroom Quiz

88th of 887 rated healthcare providers

Job description

Position Title
Director, Cybersecurity Compliance
Job Description
Purpose & Scope:
The Director of Cybersecurity Compliance leads the healthcare organization's information security governance, risk, and compliance (GRC) program. This role is accountable for defining regulatory requirements, establishing risk management frameworks, and independently assessing the effectiveness of cybersecurity controls to ensure alignment with healthcare regulations, patient privacy obligations, and industry standards.
This leader serves as the independent oversight function for cybersecurity, ensuring that controls implemented by cybersecurity and IT teams meet regulatory, audit, and risk expectations without introducing bias from operational ownership. The Director partners closely with cybersecurity operations, clinical leadership, legal, and compliance to embed security and compliance into workflows while maintaining safe and uninterrupted patient care.
Education:
Bachelor's degree in Information Security, Information Technology, Healthcare Administration, or related field. Master's preferred.
Experience:
10+ years of experience in IT security, risk, or compliance, with significant experience in healthcare
5+ years in a leadership role within a healthcare or regulated environment
Knowledge and Skills
  • Deep knowledge of healthcare regulations (HIPAA/HITECH) and security frameworks (NIST, HITRUST, ISO)
  • Strong understanding of risk management methodologies and audit practices
  • Experience with GRC platforms and compliance tooling
  • Ability to independently assess control effectiveness and identify gaps
  • Strong understanding of PHI handling, privacy requirements, and breach response obligations
  • Ability to translate regulatory requirements into practical governance structures

Certification/Licensure:
  • CISSP, CISM, CISA, or CRISC, preferred
  • HCISPP (Healthcare Information Security and Privacy Practitioner), preferred
  • HITRUST CCSFP, preferred

Additional Job Description
At VHC Health, every role contributes to exceptional care, better outcomes, and stronger communities.
\nIn addition to your base compensation, VHC Health offers a comprehensive benefits package, including medical, dental, and vision coverage (subject to eligibility requirements), as well as additional wellness and retirement benefits designed to support our employees and their families.
\nVHC Health is committed to wage transparency and equitable pay practices. The compensation offered for this position-whether expressed as an annual salary or hourly rate-is determined based on a variety of legitimate, non-discriminatory factors. These factors include, but are not limited to, a candidate's qualifications, relevant training and experience, skill level, shift differentials (where applicable), internal equity, and current market conditions.
\nThe posted hiring range reflects the range VHC Health, in good faith, believes is appropriate for this role at the time of posting. This range may be adjusted in the future based on business needs or market changes. No portion of compensation is considered earned until it is vested and determined in accordance with the terms of applicable policies and benefit plans. The availability and amount of any bonuses, incentives, or other benefits are subject to the terms of those plans and may be modified at the sole discretion of VHC Health, in accordance with applicable law.
\nVHC Health is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to age, color, disability, gender identity or expression, marital status, national or ethnic origin, political affiliation, pregnancy (including childbirth, pregnancy-related conditions and lactation), race, religion, sex, sexual orientation, veteran status, genetic information, or any other characteristics protected by law.
\nVHC Health maintains a drug-free workplace. The unlawful manufacture, distribution, dispensing, possession, or use of a controlled substance is prohibited at all VHC Health locations.

What VHC Health employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply