1

Security Risk Compliance Jobs in Virginia (NOW HIRING)

Collaborate with Information Security, Risk, Compliance, Legal, Audit, IT, and business stakeholders to support enterprise policy and compliance initiatives * Operationalize and automate policy and ...

Advise company leadership on security risk, compliance posture, and program readiness ahead of customer and government inspections. Required Qualifications: * Current Top Secret clearance with SCI ...

next page

Showing results 1-20

Security Risk Compliance information

See Virginia salary details

$32.2K

$80.4K

$122.4K

How much do security risk compliance jobs pay per year?

As of Aug 10, 2026, the average yearly pay for security risk compliance in Virginia is $80,447.00, according to ZipRecruiter salary data. Most workers in this role earn between $60,000.00 and $99,100.00 per year, depending on experience, location, and employer.

What is the difference between Security Risk Compliance vs Security Analyst?

AspectSecurity Risk ComplianceSecurity Analyst
CertificationsISO 27001 Lead Implementer, CISSP, CISACISSP, CompTIA Security+, GIAC Security Certifications
Work EnvironmentPolicy development, compliance audits, risk assessmentsMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageFinancial, healthcare, government sectors focusing on regulatory adherenceIT departments across various industries focusing on security operations

Security Risk Compliance professionals focus on ensuring organizations meet regulatory standards and manage security risks through policies and audits. Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. While both roles require security certifications and work within similar environments, their core responsibilities differ: compliance versus active security monitoring.

What are some common challenges faced by security risk compliance professionals when balancing regulatory requirements with business objectives?

Security Risk Compliance professionals often need to navigate the delicate balance between adhering to complex regulatory standards and supporting the organization's operational goals. A major challenge is ensuring compliance without hindering business innovation or efficiency. This involves working closely with various departments to interpret regulations, communicate risks, and implement pragmatic controls that satisfy both legal requirements and business needs. Effective collaboration and ongoing education are key to overcoming these challenges and maintaining a strong security posture.

What are the key skills and qualifications needed to thrive as a security risk compliance professional?

To thrive as a Security Risk Compliance professional, you need a solid understanding of information security frameworks, risk assessment methodologies, and relevant regulations, often supported by a degree in cybersecurity or a related field. Familiarity with tools such as GRC (Governance, Risk, and Compliance) platforms, vulnerability scanners, and certifications like CISSP, CISA, or CRISC is typically required. Strong analytical thinking, attention to detail, and effective communication skills help you identify risks and collaborate with stakeholders. These skills are vital to ensure organizations meet compliance requirements, mitigate risks, and maintain trust with clients and regulators.

Is risk and compliance a good career?

A career in security risk compliance involves assessing and managing organizational risks related to security and regulatory requirements. It often requires knowledge of industry standards, certifications like CISSP or CISA, and strong analytical skills. The field offers growth opportunities and is essential for organizations to maintain security and legal adherence.

What is security risk compliance?

Security Risk Compliance refers to the process of identifying, assessing, and managing risks to an organization's information systems while ensuring adherence to relevant laws, regulations, and industry standards. Professionals in this field develop policies, conduct risk assessments, and implement controls to protect sensitive data from threats. Their work helps organizations minimize security vulnerabilities and avoid legal or financial consequences related to non-compliance.
What cities in Virginia are hiring for Security Risk Compliance jobs? Cities in Virginia with the most Security Risk Compliance job openings:
Infographic showing various Security Risk Compliance job openings in Virginia as of July 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution, with an average salary of $80,447 per year, or $38.7 per hour.

Physical Security Risk & Compliance Analyst (TS/SCI #26-127) with Security Clearance

Strategic Analysis, Inc.

Arlington, VA • On-site

Other

Posted 26 days ago


Job description

Strategic Analysis, Inc. is an Equal Opportunity Employer. Start Over with Job Search Returning Applicant?  Login Now If you need assistance or an accommodation while seeking employment with us, please email  or call: 703-527-5410. We will make a determination on your request for reasonable accommodation on a case-by-case basis. Physical Security Risk & Compliance Analyst (TS/SCI #26-127) Job Code:26-127
Location:Arlington, VA
FT/PT Status:Full Time
Required Clearance:Top Secret w/ CI Poly
Salary Range:$175k-$200k The Physical Security Risk & Compliance Analyst serves as a senior security professional responsible for evaluating, assessing, and strengthening the physical security posture of Special Access Programs (SAP), Sensitive Compartmented Information (SCI), and other classified facilities and operations. This position provides expert analysis of physical security programs by conducting inspections, compliance assessments, risk evaluations, and vulnerability analyses to ensure adherence to applicable government regulations, customer requirements, and industry best practices. Working collaboratively with government representatives, program managers, facility personnel, security professionals, engineers, and contractors, the analyst identifies physical security risks, develops mitigation strategies, and supports continuous compliance efforts to protect classified personnel, facilities, information, and assets. Responsibilities:  •     Conduct comprehensive physical security compliance reviews, inspections, assessments, and vulnerability evaluations of Special Access Program Facilities (SAPFs), Sensitive Compartmented Information Facilities (SCIFs), and other classified facilities.
•     Evaluate physical security programs for compliance with applicable government regulations, customer requirements, accreditation standards, and organizational security policies.
•     Assess facility security measures including perimeter protection, intrusion detection systems (IDS), electronic security systems (ESS), access control systems (ACS/PACS), video surveillance, locking hardware, barriers, and protective technologies.
•     Perform physical security risk assessments and vulnerability analyses to identify deficiencies, evaluate threats, and recommend practical mitigation strategies.
•     Prepare comprehensive inspection reports, executive summaries, risk assessments, corrective action plans, and compliance documentation.
•     Advise leadership, program managers, facility managers, and security personnel regarding physical security requirements, inspection readiness, accreditation support, and risk management.
•     Evaluate corrective actions to ensure identified deficiencies have been effectively resolved and documented.
•     Conduct security incident reviews involving physical security violations, facility compromises, or protection failures and recommend corrective measures.
•     Interpret and apply government security directives, customer guidance, and contractual security requirements to support consistent physical security compliance.
•     Develop, revise, and maintain physical security policies, standard operating procedures, inspection checklists, and risk assessment methodologies.
•     Support security engineering initiatives involving electronic security systems, access control technologies, alarm systems, surveillance systems, and facility protection upgrades.
•     Analyze physical security trends, inspection metrics, recurring deficiencies, and program performance to recommend continuous improvement initiatives.
•     Present inspection findings, risk assessments, and compliance briefings to executive leadership, customers, and security stakeholders.
•     Collaborate with personnel security, information security, industrial security, cybersecurity, and facility management personnel to support integrated security programs.
•     Support facility accreditation, reaccreditation, and continuous compliance activities for classified environments. Required Qualifications:  •     Active TS/SCI with current CI Poly or ability to pass
•     7+ years of progressively responsible experience in the following areas:
o         Supporting physical security programs within classified or controlled environments.
o         Conducting physical security inspections, compliance reviews, vulnerability assessments, or security audits.
o         Performing physical security risk analysis and developing mitigation recommendations.
o         Evaluating electronic security systems, intrusion detection systems, access control systems, surveillance systems, or other protective technologies.
o         Preparing formal inspection reports, executive briefings, and corrective action documentation.
•     Demonstrated experience interpreting and applying government security policies, physical security standards, and customer requirements.
•     Strong analytical, investigative, organizational, and communication skills.
•     Ability to independently manage multiple assessments while interacting effectively with executive leadership and customers. Education & Experience:  One of the following is required:
•     Bachelor’s degree in Criminal Justice, Homeland Security, Security Management, Engineering, Intelligence Studies, Business Administration, or a related field; OR
•     Associate degree with additional directly related experience; OR
•     Completion of military, government, or industry security training programs with progressively responsible experience supporting physical security programs; OR
•     An equivalent combination of education, specialized training, professional certifications, and directly related experience.
Relevant government security training, military education, industry certifications, and demonstrated experience may be substituted for a formal degree.
  Strategic Analysis, Inc. is an Equal Opportunity employer and is committed to non-discrimination in employment. All qualified applicants will receive consideration for employment without regard to race, color, religions, sex (including pregnancy, sexual orientation, or gender identity), national origin, disability (physical or mental), age (40 or older), protected veteran status, genetic information (including family medical history) or any other characteristic protected by law. This policy includes but is not limited to the following employment actions: recruitment, hiring, firing, promotion, demotion, compensation, fringe benefits, training, mentoring and sponsorship programs.