Compliance Visa Sponsorship Jobs in Virginia
Compliance visa sponsorship jobs in Virginia are concentrated in Northern Virginia, where federal contractors, financial institutions, and technology firms like Leidos, Booz Allen Hamilton, and Capital One maintain large compliance and regulatory affairs teams. The state's proximity to federal agencies in Washington, D.C. creates consistent demand for compliance professionals across defense, finance, and healthcare sectors.
Find Compliance JobsOverview
Showing 5 of 53+ Compliance Jobs in Virginia with Visa Sponsorship
See all 53+ Compliance Jobs in Virginia with Visa Sponsorship
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Compliance Jobs in Virginia with Visa Sponsorship.
Get Access To All JobsINTRODUCTION
DXC Technology is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organizations — helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernization, and Industry-Specific Software Solutions, DXC modernizes, secures, and operates some of the world's most complex technology estates.
DXC's Insurance Software and BPS (ISB) helps insurers around the world modernize and run their core operations at scale by combining deep industry expertise, proven software platforms, and innovative AI-driven solutions. A global market leader in core insurance platforms, ISB delivers solutions across policy administration, claims, billing, analytics, and digital engagement supporting Life & Annuity, Property & Casualty, and Specialty insurance markets. You’ll directly shape how the world's leading insurers operate by helping to transform the policy, underwriting, and claims systems that millions of people rely on every day.
We are seeking an experienced Governance, Risk, and Compliance (GRC) Manager to lead cybersecurity governance, risk management, policy compliance, and audit readiness across enterprise technology environments. This role is responsible for developing and maintaining security policies, overseeing risk assessment and mitigation activities, coordinating compliance initiatives, and ensuring that security controls align with applicable regulatory requirements, industry standards, and business objectives.
The ideal candidate has a strong background in cybersecurity, risk management, and policy compliance or audit within the financial services sector. The candidate should understand regulatory environments, security control frameworks, enterprise risk management practices, and the importance of maintaining effective governance and audit processes. Experience in the insurance industry or familiarity with any specific organization's internal policies, tools, or compliance processes is not required.
This position will collaborate with cybersecurity, engineering, infrastructure, development, and business teams to identify and manage risks, strengthen security controls, support audit activities, and drive continuous improvement in the organization's security and compliance posture.
The GRC Manager will also provide oversight for third-party risk management, business continuity and disaster recovery governance, risk reporting, and personnel assigned to the GRC function.
KEY RESPONSIBILITIES
- Develop, maintain, and oversee cybersecurity policies, standards, and procedures to support regulatory compliance, security governance, and organizational risk management objectives.
- Lead risk assessments across applications, cloud environments, infrastructure, software development processes, and third-party integrations to identify, evaluate, prioritize, and mitigate cybersecurity and operational risks.
- Manage policy compliance and audit readiness activities, including evidence collection, control assessments, internal and external audits, customer security assessments, and regulatory examinations.
- Evaluate the effectiveness of cybersecurity controls and work with technical and business teams to address control gaps, policy exceptions, and identified compliance deficiencies.
- Partner with cybersecurity, engineering, infrastructure, and development teams to ensure security controls are implemented, documented, and auditable throughout the software development lifecycle (SDLC) and across technology environments.
- Oversee third-party risk management processes, including vendor security assessments, review of security requirements, identification of supply chain risks, and ongoing monitoring of critical technology providers.
- Establish and maintain processes for tracking risk remediation, compliance findings, control deficiencies, policy exceptions, and formal risk acceptance.
- Support governance forums, risk committees, and architecture review meetings to evaluate new technologies, system integrations, and significant technology changes from a security and risk perspective.
- Oversee business continuity and disaster recovery governance, including testing, tabletop exercises, documentation, and remediation of identified gaps.
- Prepare and present risk and compliance reports for executive leadership and business stakeholders, including risk indicators, audit status, remediation progress, policy compliance, and overall cybersecurity posture.
- Monitor emerging cybersecurity threats, regulatory developments, and changes in industry standards, assessing their potential impact on organizational policies, controls, and risk management practices.
- Identify opportunities to improve security governance, streamline compliance activities, strengthen internal controls, and enhance the effectiveness of risk management processes.
- Collaborate with stakeholders to establish clear accountability and timelines for resolving identified risks and compliance issues.
- Supervise, develop, and lead personnel assigned to the GRC function, establishing priorities, performance expectations, and opportunities for professional development.
REQUIRED QUALIFICATIONS
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business Administration, or a related discipline.
- 7+ years of experience in cybersecurity, risk management, governance, regulatory compliance, IT audit, or a related field.
- 3+ years of experience in GRC, cybersecurity risk management, policy compliance, or audit-related responsibilities.
- Experience in cybersecurity, risk management, and policy compliance or audit within the financial services sector.
- Strong understanding of cybersecurity principles, security controls, enterprise risk management, and compliance practices.
- Experience developing, implementing, reviewing, or assessing security policies, standards, procedures, and internal controls.
- Experience conducting risk assessments, documenting findings, evaluating control effectiveness, and managing remediation activities.
- Experience supporting internal or external audits, compliance reviews, control assessments, or regulatory examinations.
- Understanding of technology and cybersecurity risks associated with applications, cloud platforms, infrastructure, data protection, and software development.
- Experience preparing risk reports, maintaining risk registers, documenting compliance findings, and communicating remediation status to stakeholders.
- Strong analytical, organizational, problem-solving, and communication skills.
- Ability to explain technical security risks and compliance requirements to both technical teams and business stakeholders.
- Demonstrated ability to coordinate cross-functional activities, manage competing priorities, and drive risk remediation to completion.
- Experience collaborating with stakeholders across cybersecurity, technology, risk, compliance, audit, and business functions.
PREFERRED QUALIFICATIONS
- Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP), or Certified in Governance, Risk and Compliance (CGRC).
- Experience with recognized cybersecurity and risk management frameworks, such as NIST Cybersecurity Framework (CSF), NIST SP 800-53, ISO 27001, or COBIT.
- Experience with governance, risk, and compliance (GRC) platforms or tools used to manage risks, controls, audit findings, and remediation activities.
- Experience assessing cybersecurity risks in cloud environments, SaaS platforms, enterprise applications, or complex IT infrastructures.
- Experience managing third-party risk assessments, vendor security reviews, or technology supply chain risks.
- Experience supporting business continuity, disaster recovery, or operational resilience programs.
- Experience developing risk dashboards, compliance metrics, and executive reporting.
- Experience supporting regulatory compliance or audit programs in highly regulated industries.
- Advanced degree in Cybersecurity, Information Technology, Risk Management, Business Administration, or a related discipline.
- Experience leading, mentoring, or supervising GRC, cybersecurity, risk, or compliance professionals.
WHAT YOU'LL BRING
- Cybersecurity and risk management expertise with the ability to identify, assess, and communicate risks across complex technology environments.
- A policy and compliance mindset focused on maintaining effective controls, supporting audit readiness, and meeting regulatory and business requirements.
- Financial services experience with an understanding of the importance of security, governance, risk management, and compliance in a regulated industry.
- A practical, risk-based approach to translating security and compliance requirements into actionable processes and measurable outcomes.
- Strong collaboration skills to work effectively with cybersecurity, technology, audit, risk, compliance, and business teams.
- Clear communication and reporting capabilities to explain risk exposure, compliance gaps, and remediation priorities to stakeholders at all levels.
- A commitment to continuous improvement through proactive risk identification, effective control implementation, and ongoing compliance monitoring.
- Leadership and accountability to drive initiatives forward, support team development, and promote a culture of security, risk awareness, and compliance.
At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.
If you are an applicant from the United States, Guam, or Puerto Rico
DXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law. View postings below.
We participate in E-Verify. In addition to the posters already identified, DXC provides access to prospective employees for the Federal Minimum Wage Poster, Federal Polygraph Protection Act Poster as well as any state or locality specific applicant posters. To access the postings in the link below, select your state to view all applicable federal, state and locality postings. Postings are available in English, and in Spanish, where required. View postings below.
Disability Accommodations
If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us via email.
Please note: DXC will respond only to requests for accommodations due to a disability.
Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.
INTRODUCTION
DXC Technology is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organizations — helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernization, and Industry-Specific Software Solutions, DXC modernizes, secures, and operates some of the world's most complex technology estates.
DXC's Insurance Software and BPS (ISB) helps insurers around the world modernize and run their core operations at scale by combining deep industry expertise, proven software platforms, and innovative AI-driven solutions. A global market leader in core insurance platforms, ISB delivers solutions across policy administration, claims, billing, analytics, and digital engagement supporting Life & Annuity, Property & Casualty, and Specialty insurance markets. You’ll directly shape how the world's leading insurers operate by helping to transform the policy, underwriting, and claims systems that millions of people rely on every day.
We are seeking an experienced Governance, Risk, and Compliance (GRC) Manager to lead cybersecurity governance, risk management, policy compliance, and audit readiness across enterprise technology environments. This role is responsible for developing and maintaining security policies, overseeing risk assessment and mitigation activities, coordinating compliance initiatives, and ensuring that security controls align with applicable regulatory requirements, industry standards, and business objectives.
The ideal candidate has a strong background in cybersecurity, risk management, and policy compliance or audit within the financial services sector. The candidate should understand regulatory environments, security control frameworks, enterprise risk management practices, and the importance of maintaining effective governance and audit processes. Experience in the insurance industry or familiarity with any specific organization's internal policies, tools, or compliance processes is not required.
This position will collaborate with cybersecurity, engineering, infrastructure, development, and business teams to identify and manage risks, strengthen security controls, support audit activities, and drive continuous improvement in the organization's security and compliance posture.
The GRC Manager will also provide oversight for third-party risk management, business continuity and disaster recovery governance, risk reporting, and personnel assigned to the GRC function.
KEY RESPONSIBILITIES
- Develop, maintain, and oversee cybersecurity policies, standards, and procedures to support regulatory compliance, security governance, and organizational risk management objectives.
- Lead risk assessments across applications, cloud environments, infrastructure, software development processes, and third-party integrations to identify, evaluate, prioritize, and mitigate cybersecurity and operational risks.
- Manage policy compliance and audit readiness activities, including evidence collection, control assessments, internal and external audits, customer security assessments, and regulatory examinations.
- Evaluate the effectiveness of cybersecurity controls and work with technical and business teams to address control gaps, policy exceptions, and identified compliance deficiencies.
- Partner with cybersecurity, engineering, infrastructure, and development teams to ensure security controls are implemented, documented, and auditable throughout the software development lifecycle (SDLC) and across technology environments.
- Oversee third-party risk management processes, including vendor security assessments, review of security requirements, identification of supply chain risks, and ongoing monitoring of critical technology providers.
- Establish and maintain processes for tracking risk remediation, compliance findings, control deficiencies, policy exceptions, and formal risk acceptance.
- Support governance forums, risk committees, and architecture review meetings to evaluate new technologies, system integrations, and significant technology changes from a security and risk perspective.
- Oversee business continuity and disaster recovery governance, including testing, tabletop exercises, documentation, and remediation of identified gaps.
- Prepare and present risk and compliance reports for executive leadership and business stakeholders, including risk indicators, audit status, remediation progress, policy compliance, and overall cybersecurity posture.
- Monitor emerging cybersecurity threats, regulatory developments, and changes in industry standards, assessing their potential impact on organizational policies, controls, and risk management practices.
- Identify opportunities to improve security governance, streamline compliance activities, strengthen internal controls, and enhance the effectiveness of risk management processes.
- Collaborate with stakeholders to establish clear accountability and timelines for resolving identified risks and compliance issues.
- Supervise, develop, and lead personnel assigned to the GRC function, establishing priorities, performance expectations, and opportunities for professional development.
REQUIRED QUALIFICATIONS
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business Administration, or a related discipline.
- 7+ years of experience in cybersecurity, risk management, governance, regulatory compliance, IT audit, or a related field.
- 3+ years of experience in GRC, cybersecurity risk management, policy compliance, or audit-related responsibilities.
- Experience in cybersecurity, risk management, and policy compliance or audit within the financial services sector.
- Strong understanding of cybersecurity principles, security controls, enterprise risk management, and compliance practices.
- Experience developing, implementing, reviewing, or assessing security policies, standards, procedures, and internal controls.
- Experience conducting risk assessments, documenting findings, evaluating control effectiveness, and managing remediation activities.
- Experience supporting internal or external audits, compliance reviews, control assessments, or regulatory examinations.
- Understanding of technology and cybersecurity risks associated with applications, cloud platforms, infrastructure, data protection, and software development.
- Experience preparing risk reports, maintaining risk registers, documenting compliance findings, and communicating remediation status to stakeholders.
- Strong analytical, organizational, problem-solving, and communication skills.
- Ability to explain technical security risks and compliance requirements to both technical teams and business stakeholders.
- Demonstrated ability to coordinate cross-functional activities, manage competing priorities, and drive risk remediation to completion.
- Experience collaborating with stakeholders across cybersecurity, technology, risk, compliance, audit, and business functions.
PREFERRED QUALIFICATIONS
- Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP), or Certified in Governance, Risk and Compliance (CGRC).
- Experience with recognized cybersecurity and risk management frameworks, such as NIST Cybersecurity Framework (CSF), NIST SP 800-53, ISO 27001, or COBIT.
- Experience with governance, risk, and compliance (GRC) platforms or tools used to manage risks, controls, audit findings, and remediation activities.
- Experience assessing cybersecurity risks in cloud environments, SaaS platforms, enterprise applications, or complex IT infrastructures.
- Experience managing third-party risk assessments, vendor security reviews, or technology supply chain risks.
- Experience supporting business continuity, disaster recovery, or operational resilience programs.
- Experience developing risk dashboards, compliance metrics, and executive reporting.
- Experience supporting regulatory compliance or audit programs in highly regulated industries.
- Advanced degree in Cybersecurity, Information Technology, Risk Management, Business Administration, or a related discipline.
- Experience leading, mentoring, or supervising GRC, cybersecurity, risk, or compliance professionals.
WHAT YOU'LL BRING
- Cybersecurity and risk management expertise with the ability to identify, assess, and communicate risks across complex technology environments.
- A policy and compliance mindset focused on maintaining effective controls, supporting audit readiness, and meeting regulatory and business requirements.
- Financial services experience with an understanding of the importance of security, governance, risk management, and compliance in a regulated industry.
- A practical, risk-based approach to translating security and compliance requirements into actionable processes and measurable outcomes.
- Strong collaboration skills to work effectively with cybersecurity, technology, audit, risk, compliance, and business teams.
- Clear communication and reporting capabilities to explain risk exposure, compliance gaps, and remediation priorities to stakeholders at all levels.
- A commitment to continuous improvement through proactive risk identification, effective control implementation, and ongoing compliance monitoring.
- Leadership and accountability to drive initiatives forward, support team development, and promote a culture of security, risk awareness, and compliance.
At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.
If you are an applicant from the United States, Guam, or Puerto Rico
DXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law. View postings below.
We participate in E-Verify. In addition to the posters already identified, DXC provides access to prospective employees for the Federal Minimum Wage Poster, Federal Polygraph Protection Act Poster as well as any state or locality specific applicant posters. To access the postings in the link below, select your state to view all applicable federal, state and locality postings. Postings are available in English, and in Spanish, where required. View postings below.
Disability Accommodations
If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us via email.
Please note: DXC will respond only to requests for accommodations due to a disability.
Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.
Compliance Job Roles in Virginia
See all 53+ Compliance Jobs in Virginia
Sign up for free to filter by visa type, set job alerts, and find employers with verified sponsorship history.
Search Compliance Jobs in VirginiaCompliance Jobs in Virginia: Frequently Asked Questions
Which companies sponsor visas for compliance roles in Virginia?
Federal contractors and financial services firms are among the most active visa sponsors for compliance roles in Virginia. Companies like Booz Allen Hamilton, Leidos, Capital One, Freddie Mac, and Hilton have sponsored compliance professionals in the past. Defense contractors in Northern Virginia frequently hire regulatory and contract compliance specialists, while large banks and financial institutions in the McLean and Tysons corridor hire compliance analysts and risk officers.
Which visa types are most common for compliance roles in Virginia?
The H-1B visa is the most common visa for compliance professionals in Virginia, as regulatory affairs, compliance analyst, and financial compliance roles typically qualify as specialty occupations requiring at least a bachelor's degree in a relevant field like law, finance, or accounting. Some senior or internationally transferred compliance professionals may be sponsored under the L-1A or L-1B categories, particularly within large multinational firms with Virginia offices.
Which cities in Virginia have the most compliance sponsorship jobs?
Northern Virginia, particularly Tysons, McLean, Reston, and Arlington, concentrates the majority of compliance sponsorship opportunities due to its density of federal contractors, financial institutions, and technology companies. Richmond is a secondary hub, driven by financial services and healthcare compliance demand. Virginia Beach and Norfolk have compliance roles tied to defense contractors and healthcare systems operating in the Hampton Roads region.
How to find compliance visa sponsorship jobs in Virginia?
Migrate Mate filters job listings specifically by visa sponsorship availability, making it easier to identify compliance roles in Virginia where employers are actively open to sponsoring. Rather than sorting through postings that don't address sponsorship at all, you can search compliance jobs across Northern Virginia, Richmond, and other Virginia markets on Migrate Mate and focus your applications on employers with a documented history of sponsoring international candidates.
Are there state-specific considerations for compliance professionals seeking sponsorship in Virginia?
Virginia's compliance job market is heavily shaped by its proximity to federal regulatory agencies in Washington, D.C., which means many roles require security clearances or U.S. citizenship, particularly within defense contracting. International candidates should verify clearance requirements before applying. Virginia's strong pipeline from George Mason University, George Washington University, and University of Virginia also means employers have access to local talent, so candidates with specialized regulatory expertise in areas like financial compliance, cybersecurity governance, or healthcare regulation tend to be more competitive for sponsored roles.
What is the prevailing wage for sponsored compliance jobs in Virginia?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.