---
title: 'Security Governance Risk & Compliance (GRC) Analyst at Virtru'
canonical: 'https://feeny.ai/job/security-governance-risk-compliance-grc-analyst-virtru-washington-fmrdr1d2x5kb'
type: 'job'
last_seen: '2026-09-11'
---

# Security Governance Risk & Compliance (GRC) Analyst at Virtru

- **Company:** Virtru
- **Location:** Washington, DC
- **Work type:** remote
- **Posted:** 2026-07-20
- **Last confirmed live:** 2026-09-11
- **Apply:** https://job-boards.greenhouse.io/virtru/jobs/4716737005

## Job description

About Virtru:

While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you can intentionally share it with others, but without sacrificing security, privacy, or control.

We've created both a suite of powerful data protection applications and an open platform that's sparking an ecosystem of innovation. Through the Trusted Data Format (TDF) open standard, we're not just protecting data; we're creating a new paradigm where security enables sharing rather than preventing it.

Think of us as the Android of data protection: a robust platform with an open core that developers and partners can build upon, coupled with our own best-in-class applications that showcase what's possible when you reimagine security from the ground up.

Backed by Iconiq Capital, Bessemer Venture Partners, Foundry Capital, and Tiger Global, we're helping Fortune 500 companies and government agencies discover that true data security means having the freedom to share, collaborate, and innovate — without compromise.

Compensation: $130,000-$170,000/year

Team & Position Details:

Here at Virtru you’ll help build a cutting edge security compliance program aligned with FedRAMP, SOC 2, PCI, HIPAA, GDPR, and just about any other security/privacy framework you can think of, whilst getting your hands on some of today’s most important tools and tech like Kubernetes, GCP, AWS, Terraform. We put a high value on input from everyone on our team. Your voice will have a significant impact. With a constantly growing customer base, there is no shortage of challenging and exciting scaling/optimization work to ensure that we can provide the most secure and performant service.

As a GRC Analyst at Virtru, you will be the primary point of contact for compliance-related inquiries. You will lead and manage the organization's efforts to achieve and maintain CMMC compliance, by conducting gap analyses and developing a roadmap to address compliance requirements. You will also play a vital role in supporting our existing FedRAMP, SOC2, and PCI DSS compliance.

Get in touch if you are excited to help us grow into a world-class security compliance program.

As a Security Governance Risk & Compliance (GRC) Analyst, your responsibilities will include:

- Manage and implement complex controls frameworks for large systems, consisting of Cloud infrastructure and Software as a Service (SaaS) services (GCP, AWS, GitHub, Okta, etc).
- Design and develop automation solutions for evidence collection across Cloud infrastructure, endpoints, and SaaS services.
- Conduct risk assessments across business units and processes. Identify risk findings and recommend remediation and risk mitigation strategies.
- Participate in incident response (IR) activities, providing risk analysis and remediation support as needed.
- Assist or implement automated controls to support risk mitigation efforts across various business units with stakeholders.
- Incorporate CMMC certification into Virtru’s slate of compliance assessments and ongoing monitoring activities  (FedRAMP, SOC 2, PCI).
- Facilitate the third-party vendor on-boarding and annual review process by evaluating the security of current and prospective partners.
- Enhance the team with your individualism, spirit, and love of learning.

Skills that will help you thrive in this role:

- Minimum of 5+ years of information security, IT audit and/or IT Risk Management, or GRC Analyst/Engineer experience
- Deep understanding of at least few of the following: CMMC, NIST 800-53 & 800-171, FedRAMP, SOC 2, PCI, and/or other global privacy compliance frameworks
- Technical acumen. Strong understanding of modern cloud technologies (AWS, GCP, Azure, etc.) and familiarity with GRC tools (Hyperproof, Vanta, Drata, etc) and SIEM tools (Datadog, Splunk)
- You’re a relationship builder and have worked with both business and technical risk and understand how to translate risk to various levels of the organization
- Have experience training and coaching teams to become better security and privacy practitioners
- Like working on an autonomous agile team. At Virtru, you will have ownership of security, but you'll collaborate with everyone to make sure we produce and implement the right solutions
- Ability to resolve conflicts and drive issues to completion.
- Work independently with little or no supervision while maintaining a high level of efficiency.

Virtruvian qualities that will set you up for success:

- Thinking outside of the box to respectfully challenge your teammates and managers in the pursuit of excellence
- Strong sense of urgency with an action-oriented mindset
- Able to collaborate and adapt to shifting priorities as business needs evolve
- Comfortable with asynchronous communication including slack, email, zoom, etc.

Perks & Benefits:

At Virtru, we believe people do their best work when their wellbeing is put first. This is why we make your wellbeing our priority with a thoughtful and holistic program that encompasses Occupational, Mental, Social, Physical, and Environmental Wellness by offering benefits such as…

- A Flexible PTO policy — we strongly encourage you to take time off (in addition to 14 holidays) to ensure that you are getting the proper time needed to unplug and recharge.
- A $1,500 annual Learning & Development Stipend focused on providing you the resources to continually learn and professionally grow.
- Frequent company-sponsored team celebrations that provide ample opportunities to connect with teammates and be social!
- Access to an Employee Assistance Program
- Access to Headspace, a mental health app tailored to your specific needs.
- A flat 3% contribution to your retirement account
- A high degree of flexibility — Have an appointment, errand, or family emergency to take care of? Hop to it! We give you the time and space to take care of you and your own first.

In addition to wellbeing, Virtru places a strong emphasis on diversity, equity, inclusion, and belonging. Our DB&I Council is dedicated to fostering an inclusive workplace and making the psychological safety of each and every one of our teammates a top priority.

Additional perks include:

- Competitive compensation
- Generous parental, medical, and bereavement policies
- Uncapped commissions for Sales roles
- 401K contribution and stock options
- Full medical, dental, and vision benefits
- New Hire Swag and IT Welcome boxes
- Structured semi-annual 360° performance reviews

Virtru is committed to building an inclusive environment for people of all backgrounds and everyone is encouraged to apply. Virtru is an Equal Opportunity Employer and does not discriminate on the basis of race, color, gender, religion, disability, national origin, protected veteran status, age, or any other status protected by applicable national, federal, state, or local law.

## About Virtru

## Company Overview
- **One-liner**: Virtru provides a data security platform that enables organizations to share information securely with end-to-end encryption and granular access controls, integrating with everyday applications like Gmail, Outlook, Google Drive, and Zendesk.
- **Entity Type**: Private (funding stage not publicly available)
- **Headquarters**: Washington, DC, USA
- **Founded**: 2012
- **Founders**: John Ackerly and Will Ackerly

## Core Business
- **Primary industries**: Cybersecurity, Data Security, Information Privacy
- **Target customers**: B2B – Enterprise, Government agencies, Regulated industries (e.g., healthcare, defense)
- **Mission**: “To unlock the power of data by creating a world where it is always under your control, everywhere.”

## Products & Services
- **[Virtru Data Security Platform](https://www.virtru.com/)**: A SaaS platform that provides data-centric encryption and access controls for email, files, and collaboration tools. Powered by the open Trusted Data Format (TDF) standard.
- **Virtru Email Encryption**: End-to-end encryption for Gmail and Outlook, with policy controls like expiry and revocation.
- **Virtru File Protection**: Data-centric security for Google Drive and SharePoint, enabling granular access even after files leave the organization.
- **Virtru for Zendesk**: Encrypt and control sensitive customer support tickets.

## Market Standing
- **Valuation**: Not publicly available
- **Key Metric**: 6,700+ customers (source: [about us](https://www.virtru.com/about-us)) and 1M+ active users
- **Notable Investors**: Not publicly available
- **Growth Signals**:
  - FedRAMP authorized, FIPS 140‑2 validated — critical for government contracts
  - Expanded beyond email into file sharing and collaboration workflows
  - Active hiring across multiple locations (DC, UK, remote) for roles in engineering, sales, and government
  - Named a Washington Post Top Workplace (2022) and Inc. Power Partner (2022)

## Competitive Advantages
- **Data‑centric security**: Shifts protection from the perimeter to the data itself, remaining effective even when data moves outside the organization.
- **Regulatory compliance**: FedRAMP authorization and support for CMMC, ITAR, and other strict frameworks give Virtru a strong moat in the public sector.
- **Ease of use**: Rated #1 on G2 in 38 categories (Winter 2023), including Ease of Use for Enterprise Encryption.
- **Open standard**: Built on the open Trusted Data Format, enabling broad interoperability and ecosystem trust.

## Strategic Focus
- Deepen integration with everyday productivity tools and expand data‑centric security to more application workflows.
- Continue to serve high‑security verticals (defense, intelligence, healthcare) while scaling to commercial enterprises globally.
- Invest in developer experience and platform extensibility (e.g., OpenTDF SDKs, APIs).

## Why Work Here
- **Work flexibility**: Virtru offers flexible schedules and the option to work fully remote. Some roles are hybrid (Washington, DC) or onsite (e.g., Fort Meade, Honolulu).
- **Culture**: Employee‑led Diversity, Belonging & Inclusion Council; monthly all‑hands demos; CEO‑recognised “Virtru Players of the Week”.
- **Benefits**: Comprehensive health coverage, 401k contribution, parental leave, a $1,500 annual Learning & Development stipend, and a minimum of 25 days PTO per year.
- **Recognition**: Named a Washington Post Top Workplace (2022) and an Inc. Power Partner (2022) based on employee and customer feedback.
- **Engineering culture**: Hackathons, knowledge‑sharing time, and a focus on lifelong learning.

## Sources
1. [Virtru Homepage](https://www.virtru.com/)
2. [About Us – Virtru](https://www.virtru.com/about-us)
3. [Careers at Virtru](https://www.virtru.com/careers)
4. [Virtru Job Board (Greenhouse)](https://job-boards.greenhouse.io/virtru)
5. [Built In – Virtru Profile](https://builtin.com/company/virtru)

## Other roles at Virtru

- [Data Warehouse & Analytics Architect](https://feeny.ai/job/data-warehouse-analytics-architect-virtru-washington-f05v5qt9yeb8) — Washington, DC
- [Director of People Experience](https://feeny.ai/job/director-of-people-experience-virtru-washington-ta7ambpg8s4d) — Washington, DC
- [Operations Director](https://feeny.ai/job/operations-director-virtru-washington-73bzzyys5mxb) — Washington, DC
- [Technical Writer](https://feeny.ai/job/technical-writer-virtru-washington-1n86487v940p) — Washington, DC
- [Senior Product Manager](https://feeny.ai/job/senior-product-manager-virtru-washington-c28p4sg2mkcd) — Washington, DC
- [Senior Full Stack Engineer](https://feeny.ai/job/senior-full-stack-engineer-virtru-washington-251wm88ta9h9) — Washington, DC
- [Operations Analyst](https://feeny.ai/job/operations-analyst-virtru-washington-376xqj9zxfg8) — Washington, DC
- [Forward Deployed Engineer - Security Clearance Required](https://feeny.ai/job/forward-deployed-engineer-security-clearance-required-virtru-farnborough-3c3x0shhfqgy) — Farnborough, United Kingdom
- [Technical Program Manager  - Security Clearance Required](https://feeny.ai/job/technical-program-manager-security-clearance-required-virtru-washington-nhxy72n5epag) — Washington, DC
- [Senior Software Engineer](https://feeny.ai/job/senior-software-engineer-virtru-washington-7kcwvbq7w411) — Washington, DC