Security Compliance Analyst Jobs in Virginia
Security Compliance Analyst jobs in Virginia are among the most active in the country, concentrated in defense contracting, federal consulting, financial services, and healthcare IT, with openings at every level from entry-level GRC analyst through senior compliance architect. The Northern Virginia corridor, Richmond, and Hampton Roads account for the heaviest hiring, where major employers like Leidos, Booz Allen Hamilton, and Northrop Grumman maintain large compliance and risk practices. The most in-demand specialties are FISMA and FedRAMP compliance, NIST framework implementation, and risk and controls assessment. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 5+ Security Compliance Analyst jobs
Looking for more security compliance analyst jobs?
Explore related role searches to find more openings that fit.
See related jobsThe Security Regulatory Testing team within the Security Governance and Risk division (SG&R) is responsible for examining transactions and program documentation within the Security Business Units to ensure compliance with applicable regulations, or rules as directed by the Compliance Testing and Monitoring team.
The Summer Associate Program is a 12-week internship program beginning in May 2027 and ending in August 2027. Students will work on impactful projects and meaningful work during their internship. To qualify for this position, applicants must be currently pursuing a degree from an accredited college or university and have an anticipated graduation date of December 2027 or later.
Potential Projects:
- Regulatory Process Enhancement & Modernization (AI and Automation) - Evaluate current regulatory testing activities to identify repetitive, time-intensive tasks that could benefit from AI-assisted capabilities. Develop a prioritized roadmap of AI use cases focused on improving productivity, quality, consistency, and analyst capacity.
- Reporting & Metrics Enhancement - Inventory reporting products and performance metrics to determine which measures effectively support decision-making and which create unnecessary effort. Recommend a future-state reporting framework that improves data quality, transparency, automation, and leadership visibility.
- Process Rationalization & Risk Mapping - Evaluate relationships between Security processes, risks, controls, standards, and regulatory requirements to improve traceability and reduce complexity.
- Produce a consolidated mapping model that supports process rationalization, risk coverage analysis, and future governance activities.
- Cross-function Shadowing - Shadow staff and leaders from other Security, Governance, and Risk functions to gain visibility into cross-team enterprise efforts such as issues management, incident management, and leadership reporting.
- Collaborate with Security teams to identify potential risks and develop mitigation strategies
- Assist in the implementation of, and adhere to Enterprise Operational Risk Management policies and procedures
- Stay updated on industry regulations, standards, and best practices related to fraud mitigation, physical security and risk management
- Support and/ or participate in audits and compliance assessments to ensure adherence to relevant regulations
- Provide regular reports to senior management and stakeholders on risk findings, trends, and risk mitigation efforts
- Work with internal teams to promote risk awareness and drive a culture of risk management across the organization
- Currently enrolled in an accredited college or university pursuing a Bachelor's or Master's degree in: Business, Risk Management, Accounting, Information Security or other related fields.
- Strong analytical and problem-solving skills.
- Effective verbal and written communication skills
- Strong organizational and time management skills with the ability to work independently or on a team.
- Proficiency with Microsoft Office products including Excel, Word, PowerPoint, and Teams.
Desired Qualifications:
- Coursework or experience in audit, risk management, compliance, internal controls, or cybersecurity
- Familiarity with risk assessment frameworks or control frameworks such as COSO, NIST, FFIEC, ISO 27001, or COBIT
- Understanding of governance, risk and compliance (GRC) concepts
- Experience using data analysis tools such as Excel, Power BI, SQL, or similar technologies
- Interest in pursing careers in internal audit, compliance, risk management, security governance, or cybersecurity.
Additional Information
Hours:
Monday - Friday, 8:00 AM - 4:30 PMLocation:
- 820 Follin Lane, Vienna, VA 22180
- 5550 Heritage Oaks Drive, Pensacola, FL 32526
- 141 Security Drive, Winchester, VA 22602
Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.
Our approach to careers is simple yet powerful: Make our mission your passion.
- FORTUNE 100 Best Companies to Work For® 2025
- Yello and WayUp Top 100 Internship Programs
- Computerworld® Best Places to Work in IT
- Newsweek Most Loved Workplaces
- 2025 PEOPLE® Companies That Care
- Newsweek Most Trustworthy Companies in America
- Military Times 2025 Best for Vets Employers
- Best Companies for Latinos to Work for 2025
- Forbes® 2025 America’s Best Large Employers
- Forbes® 2025 America's Best Employers for New Grads
- Forbes® 2025 America's Best Employers for Tech Workers
- 2025 RippleMatch Campus Forward Award Winner for Overall Excellence
- Military.com Top Military Spouse Employers 2025
- 2025 Handshake Early Talent Award
From Fortune . ©2025 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.
Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.
Accommodations: If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at medicalaccommodations@navyfederal.org or by calling 1-888-503-6013. This team cannot provide any information on job postings or application status.
Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team’s discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position. For additional details regarding compensation and benefits, review the Benefits page of the Navy Federal Career Site.
Protect Yourself from Job Scams: Navy Federal Credit Union jobs are posted on our career site, jobs.navyfederal.org and reputable job boards (e.g., LinkedIn, Indeed). We do not post jobs on social media marketplaces, messaging apps or unverified websites. We will never ask candidates for payment, bank details or personal financial information during the hiring process.
Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.
The Security Regulatory Testing team within the Security Governance and Risk division (SG&R) is responsible for examining transactions and program documentation within the Security Business Units to ensure compliance with applicable regulations, or rules as directed by the Compliance Testing and Monitoring team.
The Summer Associate Program is a 12-week internship program beginning in May 2027 and ending in August 2027. Students will work on impactful projects and meaningful work during their internship. To qualify for this position, applicants must be currently pursuing a degree from an accredited college or university and have an anticipated graduation date of December 2027 or later.
Potential Projects:
- Regulatory Process Enhancement & Modernization (AI and Automation) - Evaluate current regulatory testing activities to identify repetitive, time-intensive tasks that could benefit from AI-assisted capabilities. Develop a prioritized roadmap of AI use cases focused on improving productivity, quality, consistency, and analyst capacity.
- Reporting & Metrics Enhancement - Inventory reporting products and performance metrics to determine which measures effectively support decision-making and which create unnecessary effort. Recommend a future-state reporting framework that improves data quality, transparency, automation, and leadership visibility.
- Process Rationalization & Risk Mapping - Evaluate relationships between Security processes, risks, controls, standards, and regulatory requirements to improve traceability and reduce complexity.
- Produce a consolidated mapping model that supports process rationalization, risk coverage analysis, and future governance activities.
- Cross-function Shadowing - Shadow staff and leaders from other Security, Governance, and Risk functions to gain visibility into cross-team enterprise efforts such as issues management, incident management, and leadership reporting.
- Collaborate with Security teams to identify potential risks and develop mitigation strategies
- Assist in the implementation of, and adhere to Enterprise Operational Risk Management policies and procedures
- Stay updated on industry regulations, standards, and best practices related to fraud mitigation, physical security and risk management
- Support and/ or participate in audits and compliance assessments to ensure adherence to relevant regulations
- Provide regular reports to senior management and stakeholders on risk findings, trends, and risk mitigation efforts
- Work with internal teams to promote risk awareness and drive a culture of risk management across the organization
- Currently enrolled in an accredited college or university pursuing a Bachelor's or Master's degree in: Business, Risk Management, Accounting, Information Security or other related fields.
- Strong analytical and problem-solving skills.
- Effective verbal and written communication skills
- Strong organizational and time management skills with the ability to work independently or on a team.
- Proficiency with Microsoft Office products including Excel, Word, PowerPoint, and Teams.
Desired Qualifications:
- Coursework or experience in audit, risk management, compliance, internal controls, or cybersecurity
- Familiarity with risk assessment frameworks or control frameworks such as COSO, NIST, FFIEC, ISO 27001, or COBIT
- Understanding of governance, risk and compliance (GRC) concepts
- Experience using data analysis tools such as Excel, Power BI, SQL, or similar technologies
- Interest in pursing careers in internal audit, compliance, risk management, security governance, or cybersecurity.
Additional Information
Hours:
Monday - Friday, 8:00 AM - 4:30 PMLocation:
- 820 Follin Lane, Vienna, VA 22180
- 5550 Heritage Oaks Drive, Pensacola, FL 32526
- 141 Security Drive, Winchester, VA 22602
Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.
Our approach to careers is simple yet powerful: Make our mission your passion.
- FORTUNE 100 Best Companies to Work For® 2025
- Yello and WayUp Top 100 Internship Programs
- Computerworld® Best Places to Work in IT
- Newsweek Most Loved Workplaces
- 2025 PEOPLE® Companies That Care
- Newsweek Most Trustworthy Companies in America
- Military Times 2025 Best for Vets Employers
- Best Companies for Latinos to Work for 2025
- Forbes® 2025 America’s Best Large Employers
- Forbes® 2025 America's Best Employers for New Grads
- Forbes® 2025 America's Best Employers for Tech Workers
- 2025 RippleMatch Campus Forward Award Winner for Overall Excellence
- Military.com Top Military Spouse Employers 2025
- 2025 Handshake Early Talent Award
From Fortune . ©2025 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.
Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.
Accommodations: If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at medicalaccommodations@navyfederal.org or by calling 1-888-503-6013. This team cannot provide any information on job postings or application status.
Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team’s discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position. For additional details regarding compensation and benefits, review the Benefits page of the Navy Federal Career Site.
Protect Yourself from Job Scams: Navy Federal Credit Union jobs are posted on our career site, jobs.navyfederal.org and reputable job boards (e.g., LinkedIn, Indeed). We do not post jobs on social media marketplaces, messaging apps or unverified websites. We will never ask candidates for payment, bank details or personal financial information during the hiring process.
Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.
See All 5 Security Compliance Analyst Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find JobsSecurity Compliance Analyst Jobs by City in Virginia
Where Virginia roles are concentrated, by current openings.
Security Compliance Analyst Job Market in Virginia
A snapshot from current Virginia openings, updated as new roles post.
Who's Hiring
What Virginia Employers Look For
The qualifications that appear most often in security compliance analyst jobs across Virginia.
- Active Security+ or CISSP certification recognized by Virginia federal contractors and agencies
- Experience applying NIST SP 800-53 controls or RMF in a federal or defense environment
- Familiarity with FedRAMP authorization processes and cloud security compliance documentation
- Bachelor's degree in information security, cybersecurity, computer science, or a related field
- Hands-on experience with GRC platforms such as Archer, ServiceNow, or similar tools
- Strong written communication skills for producing security assessment reports and audit evidence
Security Compliance Analyst Jobs in Virginia: Frequently Asked Questions
How do you become a security compliance analyst in Virginia?
Most Virginia employers require a bachelor's degree in cybersecurity, information technology, or a related field alongside a vendor-neutral certification such as CompTIA Security+, CISA, or CISSP. Virginia has no state-issued license specific to this role, but the defense and federal contracting sector that dominates Northern Virginia adds a practical requirement: candidates who hold or can obtain a DoD security clearance move through hiring far faster than those who cannot.
How much do security compliance analysts make in Virginia?
Security compliance analysts in Virginia earn a median of about $134,900 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $81,410 for the lowest 10% to over $205,750 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire security compliance analysts in Virginia?
Employers hiring security compliance analysts in Virginia right now include TAKT, Dominion Energy, and Strategic Analysis, based on current listings on Migrate Mate as of September 2026. Virginia's dense concentration of federal agencies and defense prime contractors means a large share of these openings require familiarity with government compliance frameworks such as NIST RMF or CMMC.
Which Virginia cities have the most security compliance analyst jobs?
Reston, Vienna, and Richmond have the most security compliance analyst openings in Virginia. Northern Virginia leads by a wide margin because it sits next to federal agency headquarters and hosts the headquarters or large delivery centers of most major defense and IT consulting primes, while Richmond and Hampton Roads contribute openings tied to financial services firms, healthcare systems, and naval and military installations.
Are there remote security compliance analyst jobs in Virginia?
Yes, and more than most fields, because much of the work involves documentation review, control assessments, and policy writing that does not require physical presence. About 100% of security compliance analyst openings tied to Virginia are remote or hybrid as of September 2026, though positions requiring access to classified systems or government facilities remain predominantly on-site. Policy, audit prep, and vendor risk roles tend to be the most remote-accessible.
How can I get hired as a security compliance analyst in Virginia with little or no experience?
The most realistic entry path is moving laterally from an IT helpdesk, systems administration, or junior network analyst role into a GRC associate or compliance coordinator position. Large Virginia defense contractors such as Leidos and SAIC regularly post associate-level compliance analyst roles that accept candidates with CompTIA Security+ and limited hands-on experience. Pursuing a CISA exam prep course or completing a NIST RMF training through a community college in Northern Virginia sharpens your candidacy considerably.
Where can I find and apply to security compliance analyst jobs in Virginia?
You can find and apply to security compliance analyst jobs in Virginia on Migrate Mate, which lists current openings across the state. Search the available roles, find the ones that fit your experience and location, and apply directly to each employer.
See All 5 Security Compliance Analyst Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find Jobs