Jobs › Virginia
Virginia GRC Jobs
Governance, risk, and compliance jobs in Virginia: government contracting, defense, cloud infrastructure, and financial services.
Open GRC jobs in Virginia (19)
IT CYBERSECURITY SPECIALIST (INFOSEC)
IT Cybersecurity Specialist
AUDITOR
IT Cybersecurity Specialist (INFOSEC)
Supervisory IT Cybersecurity Specialist (INFOSEC)
Cybersecurity Information Technology Specialist
IT Cybersecurity Specialist (PLCYPN-INFOSEC)
IT Cybersecurity Specialist (PLCYPLN-INFOSEC)
Chief Architect for Cyber Services
Auditor
Maritime Training Auditor (External)
IT Cybersecurity Specialist (INFOSEC)
TITLE 32 QUALITY ASSURANCE SPECIALIST GS-1910-11
Medical Records Technician (Coder/Audit/Training)
Lead IT Cybersecurity Specialist (INFOSEC)
Manager, Risk Management (Global Payments Network)
Auditor
Cybersecurity Consultant
IT Specialist Cyber Security (Developmental)
The Virginia GRC market
Northern Virginia is one of the densest GRC markets in the country, driven by government contracting, defense, and the data center and cloud corridor around Arlington, McLean, Reston, and Tysons. Security clearances are common, and compliance work often maps to federal frameworks and standards. Richmond adds a financial services and insurance base. For governance professionals who want public sector adjacent, cleared, or framework heavy work, Virginia is a primary destination.
Key sectors: government contracting, defense, cloud infrastructure, and financial services. On the board now: 19 local and 0 remote-eligible jobs.
BLS put the 2024 median at $78,420. In 2026, market trackers show averages from roughly $99,000 to $120,000, with the top quartile above $160,000. Financial centers and senior governance roles sit at the top of that range.
Sources: BLS, 2024 median
Virginia GRC jobs: what the market looks like right now
A snapshot built from the 19 Virginia GRC roles currently on this page.
What these roles pay
Of the 19 open Virginia GRC roles on this page, 18 publish a salary range. Across those:
- Median advertised midpoint: $124k
- Middle half of the market: $98k to $166k
- Full advertised range: $51k to $197k
Computed from the live postings on this page, not from survey data, and recalculated every time the board refreshes. Roles without a published range are excluded.
Where the work is
- Work mode: 0 remote, 0 hybrid, 19 on-site or unstated.
- Seniority mix: mid (16), senior (2), executive (1)
- Employers hiring more than one: U.S. Coast Guard (5), Patent and Trademark Office (4), Cybersecurity and Infrastructure Security Agency (2)
Skills these postings ask for
- security control mapping (SOC 2, ISO 27001, NIST CSF)
- evidence automation and continuous monitoring
- vendor security review
- vulnerability and patch governance
- incident response coordination
How to get a cybersecurity GRC job — the full career guide for this field: entry routes, transferable backgrounds, certifications and salary by level.
Certifications that come up most
None of these are universally required, but they appear often enough in Virginia GRC postings to be worth knowing: CISSP, CISM, CISA, CRISC, Security+. The certification academy covers what each one actually tests and who it is for.
Hiring for Virginia GRC?
We have 19 open Virginia GRC roles on the board right now. Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.
Post a job Pricing from $99 · About GRC Careers · Hiring toolkit
All GRC jobs · Job alerts · GRC certifications