ZipRecruiter

Log In

1

Hitrust Jobs in Virginia (NOW HIRING)

VHC Health

Director, Cybersecurity Compliance

Arlington, VA · On-site

$151K - $288K/yr

HITRUST CCSFP, preferred Additional At VHC Health, every role contributes to exceptional care, better outcomes, and stronger communities. \nIn addition to your base compensation, VHC Health offers a ...

next page

Showing results 1-20

All JobsHitrust JobsHitrust Jobs in Virginia

Hitrust information

See Virginia salary details

$69.5K

$119K

$176.5K

How much do hitrust jobs pay per year?

As of Jul 16, 2026, the average yearly pay for hitrust in Virginia is $119,031.00, according to ZipRecruiter salary data. Most workers in this role earn between $94,821.00 and $142,475.00 per year, depending on experience, location, and employer.

Is cybersecurity a dying field?

Cybersecurity professionals, including those working with HITRUST compliance, are in high demand due to increasing cyber threats and data protection regulations. The field is expected to grow steadily as organizations prioritize security, requiring skills in risk management, threat detection, and security frameworks. Continuous learning and certifications like CISSP or CISA enhance job prospects in this evolving industry.

What are the key skills and qualifications needed to thrive in the Hitrust position, and why are they important?

To thrive in a HITRUST professional role, you need a robust understanding of information security, healthcare compliance, and risk assessment, typically supported by a relevant degree or certifications such as HITRUST Certified CSF Practitioner (CCSFP). Proficiency with regulatory frameworks like HIPAA, GRC tools, and HITRUST’s MyCSF platform is crucial. Strong attention to detail, analytical thinking, and effective communication are key soft skills for working with cross-functional teams and translating complex requirements. These skills enable professionals to ensure organizational compliance, manage complex security assessments, and foster trust in healthcare data protection programs.

What jobs in the US pay $300,000 a year?

High-paying jobs that can reach or exceed $300,000 annually include roles such as senior cybersecurity professionals, chief information security officers, and IT directors, especially in large organizations. These positions often require extensive experience, advanced certifications like CISSP or CISM, and leadership responsibilities within cybersecurity or technology departments.

What typical responsibilities can I expect as a HITRUST professional in a healthcare organization?

As a HITRUST professional, you will be responsible for guiding organizations through the HITRUST CSF certification process, conducting comprehensive risk and gap assessments, and creating remediation plans to address compliance issues. Your work will often involve collaborating with IT, compliance, and executive teams to implement policies, improve security controls, and ensure adherence to industry standards like HIPAA and HITECH. You can also expect to manage regular audits, prepare documentation, and educate staff on emerging security requirements. This role plays a key part in maintaining regulatory compliance and safeguarding sensitive patient data.

What is a HITRUST job?

A HITRUST job typically involves working with the HITRUST Common Security Framework (CSF) to help organizations achieve and maintain regulatory compliance, data security, and risk management. Professionals in this role may conduct risk assessments, implement security controls, and guide organizations through the HITRUST certification process. Common job titles include HITRUST Consultant, Compliance Analyst, and Security Auditor. These roles require expertise in cybersecurity, regulatory frameworks, and industry best practices.

How much do HITRUST analysts make?

HITRUST analysts typically earn between $70,000 and $110,000 annually, depending on experience, certifications, and location. They often work with compliance frameworks, security assessments, and risk management tools in healthcare or cybersecurity environments.
What are the most commonly searched types of Hitrust jobs in Virginia? The most popular types of Hitrust jobs in Virginia are:
What are popular job titles related to Hitrust jobs in Virginia? For Hitrust jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Hitrust jobs in Virginia look for? The top searched job categories for Hitrust jobs in Virginia are:
Hitrust jobs near you
Infographic showing various Hitrust job openings in Virginia as of July 2026, with employment types broken down into 93% Full Time, 4% Part Time, and 3% Contract. Highlights an 61% Physical, 4% Hybrid, and 35% Remote job distribution, with an average salary of $119,031 per year, or $57.2 per hour.
Director, Cybersecurity Compliance

Director, Cybersecurity Compliance

VHC Health

Arlington, VA • On-site

$151K - $288K/yr

Full-time

Medical, Dental, Vision, Retirement

Re-posted 26 days ago

VHC Health rating

7.9

Company rating: 7.9 out of 10

Based on 33 frontline employees who took The Breakroom Quiz

105th of 886 rated healthcare providers

Job description

Purpose & Scope:

The Director of Cybersecurity Compliance leads the healthcare organizations information security governance, risk, and compliance (GRC) program. This role is accountable for defining regulatory requirements, establishing risk management frameworks, and independently assessing the effectiveness of cybersecurity controls to ensure alignment with healthcare regulations, patient privacy obligations, and industry standards.

This leader serves as the independent oversight function for cybersecurity, ensuring that controls implemented by cybersecurity and IT teams meet regulatory, audit, and risk expectations without introducing bias from operational ownership. The Director partners closely with cybersecurity operations, clinical leadership, legal, and compliance to embed security and compliance into workflows while maintaining safe and uninterrupted patient care.

Education:

Bachelors degree in Information Security, Information Technology, Healthcare Administration, or related field. Masters preferred.

Experience:

10+ years of experience in IT security, risk, or compliance, with significant experience in healthcare

5+ years in a leadership role within a healthcare or regulated environment

Knowledge and Skills

  • Deep knowledge of healthcare regulations (HIPAA/HITECH) and security frameworks (NIST, HITRUST, ISO)
  • Strong understanding of risk management methodologies and audit practices
  • Experience with GRC platforms and compliance tooling
  • Ability to independently assess control effectiveness and identify gaps
  • Strong understanding of PHI handling, privacy requirements, and breach response obligations
  • Ability to translate regulatory requirements into practical governance structures

Certification/Licensure:

  • CISSP, CISM, CISA, or CRISC, preferred
  • HCISPP (Healthcare Information Security and Privacy Practitioner), preferred
  • HITRUST CCSFP, preferred

At VHC Health, every role contributes to exceptional care, better outcomes, and stronger communities.
\nIn addition to your base compensation, VHC Health offers a comprehensive benefits package, including medical, dental, and vision coverage (subject to eligibility requirements), as well as additional wellness and retirement benefits designed to support our employees and their families.
\nVHC Health is committed to wage transparency and equitable pay practices. The compensation offered for this positionwhether expressed as an annual salary or hourly rateis determined based on a variety of legitimate, non-discriminatory factors. These factors include, but are not limited to, a candidates qualifications, relevant training and experience, skill level, shift differentials (where applicable), internal equity, and current market conditions.
\nThe posted hiring range reflects the range VHC Health, in good faith, believes is appropriate for this role at the time of posting. This range may be adjusted in the future based on business needs or market changes. No portion of compensation is considered earned until it is vested and determined in accordance with the terms of applicable policies and benefit plans. The availability and amount of any bonuses, incentives, or other benefits are subject to the terms of those plans and may be modified at the sole discretion of VHC Health, in accordance with applicable law.
\nVHC Health is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to age, color, disability, gender identity or expression, marital status, national or ethnic origin, political affiliation, pregnancy (including childbirth, pregnancy-related conditions and lactation), race, religion, sex, sexual orientation, veteran status, genetic information, or any other characteristics protected by law.
\nVHC Health maintains a drug-free workplace. The unlawful manufacture, distribution, dispensing, possession, or use of a controlled substance is prohibited at all VHC Health locations.

What VHC Health employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply