ZipRecruiter

Log In

1

Security Risk Compliance Jobs in Virginia (NOW HIRING)

MKS2 Technologies

Audit Compliance Analyst

Richmond, VA · On-site +1

$125K/yr

Collaborate with Information Security, Risk, Compliance, Legal, Audit, IT, and business stakeholders to support enterprise policy and compliance initiatives * Operationalize and automate policy and ...

MKS2 Technologies

Audit Compliance Analyst

Richmond, VA · On-site

$125K/yr

Collaborate with Information Security, Risk, Compliance, Legal, Audit, IT, and business stakeholders to support enterprise policy and compliance initiatives * Operationalize and automate policy and ...

Walmart

(USA) Risk Expert III

Herndon, VA · On-site

$108K - $216K/yr

As a (USA) Risk Expert III, you will lead the identification, assessment, and mitigation of ... Collaborate with stakeholders to assess compliance with security standards and frameworks.

HR Tech Job

Program Manager, Cybersecurity Risk

Reston, VA · On-site

$110.10 - $176.90/hr

Basic Qualifications * 5+ years of experience in governance, risk, and compliance (GRC), including third‑party / vendor risk management. * 2+ years of experience conducting security or ...

New

Deloitte

AI Security Engineer Manager

Richmond, VA · On-site

Risk & Compliance * Identity & Access Management * Data Protection * Cyber Design * Incident Response * Security Architecture * Business Partnership Qualifications Required: * Bachelor's degree or ...

rose international

Risk Assessor

Richmond, VA · On-site

The IT Risk Assessor is responsible for assisting with meeting security and compliance requirements per state and federal standards. The risk assessor will review information system security controls ...

rose international

Risk Assessor

Richmond, VA · On-site

The IT Risk Assessor is responsible for assisting with meeting security and compliance requirements per state and federal standards. The risk assessor will review information system security controls ...

previous page

Showing results 41-60

All JobsSecurity Risk Compliance JobsSecurity Risk Compliance Jobs in Virginia

Security Risk Compliance information

See Virginia salary details

$32.2K

$80.4K

$122.4K

How much do security risk compliance jobs pay per year?

As of Aug 21, 2026, the average yearly pay for security risk compliance in Virginia is $80,447.00, according to ZipRecruiter salary data. Most workers in this role earn between $60,000.00 and $99,100.00 per year, depending on experience, location, and employer.

What is security risk compliance?

Security Risk Compliance refers to the process of identifying, assessing, and managing risks to an organization's information systems while ensuring adherence to relevant laws, regulations, and industry standards. Professionals in this field develop policies, conduct risk assessments, and implement controls to protect sensitive data from threats. Their work helps organizations minimize security vulnerabilities and avoid legal or financial consequences related to non-compliance.

What are the key skills and qualifications needed to thrive as a security risk compliance professional?

To thrive as a Security Risk Compliance professional, you need a solid understanding of information security frameworks, risk assessment methodologies, and relevant regulations, often supported by a degree in cybersecurity or a related field. Familiarity with tools such as GRC (Governance, Risk, and Compliance) platforms, vulnerability scanners, and certifications like CISSP, CISA, or CRISC is typically required. Strong analytical thinking, attention to detail, and effective communication skills help you identify risks and collaborate with stakeholders. These skills are vital to ensure organizations meet compliance requirements, mitigate risks, and maintain trust with clients and regulators.

What are some common challenges faced by security risk compliance professionals when balancing regulatory requirements with business objectives?

Security Risk Compliance professionals often need to navigate the delicate balance between adhering to complex regulatory standards and supporting the organization's operational goals. A major challenge is ensuring compliance without hindering business innovation or efficiency. This involves working closely with various departments to interpret regulations, communicate risks, and implement pragmatic controls that satisfy both legal requirements and business needs. Effective collaboration and ongoing education are key to overcoming these challenges and maintaining a strong security posture.

What is the difference between Security Risk Compliance vs Security Analyst?

AspectSecurity Risk ComplianceSecurity Analyst
CertificationsISO 27001 Lead Implementer, CISSP, CISACISSP, CompTIA Security+, GIAC Security Certifications
Work EnvironmentPolicy development, compliance audits, risk assessmentsMonitoring security systems, incident response, vulnerability analysis
Employer & Industry UsageFinancial, healthcare, government sectors focusing on regulatory adherenceIT departments across various industries focusing on security operations

Security Risk Compliance professionals focus on ensuring organizations meet regulatory standards and manage security risks through policies and audits. Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. While both roles require security certifications and work within similar environments, their core responsibilities differ: compliance versus active security monitoring.

What cities in Virginia are hiring for Security Risk Compliance jobs?

Cities in Virginia with the most Security Risk Compliance job openings:

Security Risk Compliance jobs near you
Infographic showing various Security Risk Compliance job openings in Virginia as of July 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution, with an average salary of $80,447 per year, or $38.7 per hour.

Senior Consultant - IT Governance, Risk & Compliance (GRC)

Infinitive Inc

Ashburn, VA • On-site

$90K - $139K/yr

Full-time

Re-posted 11 days ago

Job description

Senior Consultant - IT Governance, Risk & Compliance (GRC)
ABOUT INFINITIVE
Infinitive is a data and AI consultancy that enables its clients to modernize and operationalize their data to create lasting and substantial value. We bring deep industry and technology expertise to drive and sustain adoption of new capabilities, matching our people and personalities to our clients' culture while delivering the right mix of talent and skills to enable measurable value.
Infinitive has been named Best Small Firms to Work For by Consulting Magazine 8 times, most recently in 2025, and has also been recognized as a Washington Post Top Workplace, Washington Business Journal Best Places to Work, and Virginia Business Best Places to Work.
POSITION OVERVIEW
The Senior Consultant - IT GRC is a key contributing team member within Infinitive's Transformation Practice. In this role, you will apply your expertise in IT governance, risk management, and compliance to drive successful client engagements from initiation through delivery. You will serve as a primary liaison between client stakeholders and internal teams, translating complex regulatory and risk requirements into actionable frameworks and project plans while ensuring delivery quality, schedule adherence, and measurable client value.
ROLES & RESPONSIBILITIES
GRC Program Delivery
  • Lead or co-lead the design, implementation, and assessment of IT GRC programs including risk management frameworks, control libraries, and compliance roadmaps
  • Conduct risk assessments, control gap analyses, and maturity evaluations aligned to industry frameworks (NIST CSF, ISO 27001, SOC 2, COBIT, CMMC, FedRAMP)
  • Develop and maintain GRC deliverables including policies, standards, control matrices, risk registers, and audit evidence packages
  • Support clients in remediating audit findings and implementing sustainable controls to reduce residual risk
  • Track project progress against milestones, flag risks to leadership, and take ownership of assigned components with accountability for on-time, high-quality delivery
  • Maintain 90%+ billability in support of Infinitive's organizational strategy and personal bonus eligibility
Compliance & Regulatory Analysis
  • Perform regulatory and compliance gap assessments across frameworks such as HIPAA, PCI-DSS, SOX, GDPR, CCPA, FISMA, and sector-specific requirements
  • Act as primary author of-or provide substantial input to-client-facing deliverables including compliance roadmaps, risk treatment plans, audit readiness reports, and remediation trackers
  • Map overlapping control requirements across multiple frameworks to streamline compliance efforts and reduce duplication
  • Use data to understand the scope of client risk exposures, generate insights, and develop recommended solutions in collaboration with project leadership

IT Risk Management
  • Facilitate risk identification and prioritization workshops with client stakeholders across IT, security, legal, and business functions
  • Develop and maintain risk registers, risk heat maps, and third-party/vendor risk assessment programs
  • Support the integration of GRC tooling (e.g., ServiceNow GRC, Archer, OneTrust, Vanta) to automate risk and compliance workflows
  • Demonstrate a clear understanding of project goals and client ROI; proactively surface potential needs, pain points, and risk exposures to leadership
Client Relationship Management
  • Maintain professional, responsive, and constructive client relationships with the goal of becoming a trusted GRC advisor
  • Present findings and deliverables to client stakeholders including CISOs, CIOs, compliance officers, and audit committees
  • Communicate clearly and with discretion across internal and external audiences, including senior executive and regulatory stakeholders
  • Identify new opportunities through client interactions and raise them to Infinitive leadership to support sales activities
Team & Organizational Contribution
  • Collaborate cross-functionally with Infinitive and client teams including cybersecurity, data, and cloud engineering practices
  • Actively learn adjacent skill sets and engage with fellow team members to build broad consulting capabilities
  • Participate actively in Infinitive's cultural events, career development initiatives, and recruiting efforts
  • Support sales and marketing activities as schedule allows, including communicating Infinitive's GRC capabilities and differentiators
  • Maintain flexibility when navigating change; take initiative to expand your skill set while keeping leadership informed

COMPETENCIES & SKILLS
  • Knowledge of IT GRC frameworks including NIST CSF, NIST 800-53, ISO 27001/27002, SOC 2, COBIT, CMMC, and FedRAMP
  • Hands-on experience conducting control assessments, risk assessments, and audit readiness activities
  • Proficiency with GRC platforms and tooling such as ServiceNow GRC, Archer RSA, OneTrust, Vanta, or equivalent
  • Business analysis skills including requirements gathering, process mapping, gap analysis, and stakeholder facilitation - applied to GRC program design and implementation
  • Project management methodologies, with experience managing compliance and risk remediation initiatives in Agile and waterfall environments
  • Strong interpersonal and communication skills; ability to engage effectively with both technical teams and executive client leadership
  • Familiarity with cloud security and compliance postures across AWS, Microsoft Azure, and/or Google Cloud Platform (e.g., shared responsibility model, cloud-native security controls)

Infinitive is required by law in some jurisdictions to include a reasonable estimate of the compensation range for this role. The determination of this range includes various factors not limited to skill set, level, experience, relevant training, and licensure and certifications. Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for this role in the U.S. is $90,000.00 - $139,000.00.
Infinitive is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.

Apply