Virtru
Security Governance Risk & Compliance (GRC) Analyst
Washington, DC - Remote
Sponsorship not specified$130k-$170kDetected 1 day ago
AndroidGitAWSGCPAzureCloud PlatformsKubernetesDatadogRESTSIEMIncident ResponseCompliancePerformance ManagementHIPAACommunicationMentoring
About the role
- We're setting data free so that you can intentionally share it with others, but without sacrificing security, privacy, or control.
- Through the Trusted Data Format (TDF) open standard, we're not just protecting data; we're creating a new paradigm where security enables sharing rather than preventing it.
- We put a high value on input from everyone on our team.
Responsibilities
- a robust platform with an open core that developers and partners can build upon, coupled with our own best-in-class applications that showcase what's possible when you reimagine security from the ground up.
- Backed by Iconiq Capital, Bessemer Venture Partners, Foundry Capital, and Tiger Global, we're helping Fortune 500 companies and government agencies discover that true data security means having the freedom to share, collaborate, and innovate - without compromise.
- Like working on an autonomous agile team. At Virtru, you will have ownership of security, but you'll collaborate with everyone to make sure we produce and implement the right solutions
- Ability to resolve conflicts and drive issues to completion.
- Able to collaborate and adapt to shifting priorities as business needs evolve
- Here at Virtru you'll help build a cutting edge security compliance program aligned with FedRAMP, SOC 2, PCI, HIPAA, GDPR, and just about any other security/privacy framework you can think of, whilst getting your hands on some of today's most important tools and tech like Kubernetes, GCP, AWS, Terraform.
- You will lead and manage the organization's efforts to achieve and maintain CMMC compliance, by conducting gap analyses and developing a roadmap to address compliance requirements.
- Manage and implement complex controls frameworks for large systems, consisting of Cloud infrastructure and Software as a Service (SaaS) services (GCP, AWS, GitHub, Okta, etc).
- Design and develop automation solutions for evidence collection across Cloud infrastructure, endpoints, and SaaS services.
- Participate in incident response (IR) activities, providing risk analysis and remediation support as needed.
Requirements
- Strong understanding of modern cloud technologies (AWS, GCP, Azure, etc.) and familiarity with GRC tools (Hyperproof, Vanta, Drata, etc) and SIEM tools (Datadog, Splunk)
- Technical acumen. Strong understanding of modern cloud technologies (AWS, GCP, Azure, etc.) and familiarity with GRC tools (Hyperproof, Vanta, Drata, etc) and SIEM tools (Datadog, Splunk)
- A high degree of flexibility - Have an appointment, errand, or family emergency to take care of?
Skills
- Minimum of 5+ years of information security, IT audit and/or IT Risk Management, or GRC Analyst/Engineer experience
- Have experience training and coaching teams to become better security and privacy practitioners
- Work independently with little or no supervision while maintaining a high level of efficiency.
- Incorporate CMMC certification into Virtru's slate of compliance assessments and ongoing monitoring activities (FedRAMP, SOC 2, PCI).
Compensation
- $130,000-$170,000/year
- Facilitate the third-party vendor on-boarding and annual review process by evaluating the security of current and prospective partners.
Benefits
- A Flexible PTO policy - we strongly encourage you to take time off (in addition to 14 holidays) to ensure that you are getting the proper time needed to unplug and recharge.
- A $1,500 annual Learning & Development Stipend focused on providing you the resources to continually learn and professionally grow.
- Access to Headspace, a mental health app tailored to your specific needs.
- A flat 3% contribution to your retirement account
- Generous parental, medical, and bereavement policies
- 401K contribution and stock options
- Full medical, dental, and vision benefits
This listing is sourced directly from Virtru's careers page and normalized into a canonical job model.