Virtru · 1 week ago
Security Governance Risk & Compliance (GRC) Analyst
Washington, DC
Full-time
Onsite
Senior Level, Lead/Staff
$130K/yr - $170K/yr
5+ years expVirtru is a company focused on innovative data protection solutions that allow secure sharing of information. The Security Governance Risk & Compliance (GRC) Analyst will lead compliance efforts, manage controls frameworks, conduct risk assessments, and support various compliance certifications.
Cyber SecurityInformation TechnologySaaSSoftwarePrivacySecurity
Responsibilities
Manage and implement complex controls frameworks for large systems, consisting of Cloud infrastructure and Software as a Service (SaaS) services (GCP, AWS, GitHub, Okta, etc)
Design and develop automation solutions for evidence collection across Cloud infrastructure, endpoints, and SaaS services
Conduct risk assessments across business units and processes. Identify risk findings and recommend remediation and risk mitigation strategies
Participate in incident response (IR) activities, providing risk analysis and remediation support as needed
Assist or implement automated controls to support risk mitigation efforts across various business units with stakeholders
Incorporate CMMC certification into Virtru’s slate of compliance assessments and ongoing monitoring activities (FedRAMP, SOC 2, PCI)
Facilitate the third-party vendor on-boarding and annual review process by evaluating the security of current and prospective partners
Enhance the team with your individualism, spirit, and love of learning
Qualification
Required
Minimum of 5+ years of information security, IT audit and/or IT Risk Management, or GRC Analyst/Engineer experience
Deep understanding of at least few of the following: CMMC, NIST 800-53 & 800-171, FedRAMP, SOC 2, PCI, and/or other global privacy compliance frameworks
Technical acumen. Strong understanding of modern cloud technologies (AWS, GCP, Azure, etc.) and familiarity with GRC tools (Hyperproof, Vanta, Drata, etc) and SIEM tools (Datadog, Splunk)
You're a relationship builder and have worked with both business and technical risk and understand how to translate risk to various levels of the organization
Have experience training and coaching teams to become better security and privacy practitioners
Like working on an autonomous agile team. At Virtru, you will have ownership of security, but you'll collaborate with everyone to make sure we produce and implement the right solutions
Ability to resolve conflicts and drive issues to completion
Work independently with little or no supervision while maintaining a high level of efficiency
Benefits
Flexible PTO policy — strongly encourage you to take time off (in addition to 14 holidays)
$1,500 annual Learning & Development Stipend focused on providing resources to continually learn and professionally grow
Frequent company-sponsored team celebrations
Access to an Employee Assistance Program
Access to Headspace, a mental health app tailored to your specific needs
Flat 3% contribution to your retirement account
A high degree of flexibility—time and space to take care of you and your own first (for appointment, errand, or family emergency)
Generous parental, medical, and bereavement policies
401K contribution and stock options
Full medical, dental, and vision benefits
New Hire Swag and IT Welcome boxes
Structured semi-annual 360° performance reviews
Company
Virtru
Virtru provides data encryption for email and file sharing, enabling users to easily control access to their sensitive data.
201-500 employees
Funding
Current Stage
Late StageTotal Funding
$189.76MKey Investors
ICONIQ CapitalFoundry Capital,ICONIQ GrowthICONIQ Growth
2025-07-11Series D· $50M
2022-01-20Series C· $60M
2021-02-01Series B
Leadership Team
John Ackerly
CEO & Co-Founder
Bill Smith
Chief Sales Officer (CSO)
Recent News
SEC Filings
2026-07-17
2026-07-17
Company data provided by crunchbase