[Remote] Security Governance Risk & Compliance (GRC) Analyst at Virtru

Washington, District of Columbia, United States

Virtru Logo
$130,000 – $180,000Compensation
Senior (5 to 8 years), Expert & Leadership (9+ years)Experience Level
Full TimeJob Type
UnknownVisa
Data Protection, Cybersecurity, Cloud ComputingIndustries

Requirements

Candidates must have a minimum of 5 years of experience in information security, IT audit, IT Risk Management, or as a GRC Analyst/Engineer. A deep understanding of at least a few of the following frameworks is required: CMMC, NIST 800-53 & 800-171, FedRAMP, SOC 2, PCI, and/or other global privacy compliance frameworks.

Responsibilities

The GRC Analyst will manage and implement complex controls frameworks for large systems, including cloud infrastructure and SaaS services, and design automation solutions for evidence collection. Responsibilities include conducting risk assessments, identifying findings, recommending remediation strategies, assisting with automated controls, incorporating CMMC certification into compliance assessments, facilitating third-party vendor reviews, and participating in incident response activities.

Skills

Security Governance Risk & Compliance (GRC)
FedRAMP
SOC 2
PCI
HIPAA
GDPR
Kubernetes
GCP
AWS
Terraform

Virtru

Cybersecurity solutions for data protection and privacy

About Virtru

Virtru provides data protection and privacy solutions that ensure secure sharing, storage, and analysis of data throughout its lifecycle. The core of Virtru's offering is the Trusted Data Format (TDF), which allows users to maintain control over their data, ensuring it remains protected and accessible only to authorized individuals, regardless of where it is stored or shared. This platform is utilized by over 20,000 organizations across various sectors, including healthcare, finance, government, and education, to safeguard sensitive information and comply with regulatory requirements. Unlike many competitors, Virtru offers a suite of developer tools that can be integrated into existing applications and systems, allowing organizations to embed data protection seamlessly. The company's goal is to empower organizations to maintain control over their data while preventing breaches and ensuring compliance through subscription-based services and licensing agreements.

Washington, District of ColumbiaHeadquarters
2012Year Founded
$131.8MTotal Funding
SERIES_CCompany Stage
CybersecurityIndustries
51-200Employees

Benefits

Hybrid Work Options
Unlimited Paid Time Off
Home Office Stipend
Professional Development Budget
Company Social Events
Health Insurance
Dental Insurance
Vision Insurance
Life Insurance
Disability Insurance
401(k) Company Match
Stock Options

Risks

Potential over-reliance on Google Cloud could pose risks if partnership dynamics change.
Departure of key figure Rob McDonald might impact product development momentum.
Rapid public sector expansion increases exposure to regulatory scrutiny and compliance challenges.

Differentiation

Virtru's Trusted Data Format offers persistent data protection across all storage and sharing platforms.
The company provides seamless integration with Google Workspace, enhancing data security for users.
Virtru's solutions are trusted by over 20,000 organizations across various industries.

Upsides

Increased demand for zero-trust security solutions boosts Virtru's market potential.
Recognition through multiple awards enhances Virtru's credibility and client attraction.
Expansion in the public sector indicates strategic growth and new opportunities.

Land your dream remote job 3x faster with AI