It really depends on what you do in the Windows VM. I run commercial software (not available for OS X) and never run a browser or mail, nor do I download and run dodgy software. No AV programs and I've never gotten a computer virus.
Microsoft Security Essentials is enough for the limited exposure my VM has. Free and light on system resources. Would recommend ESET if you are running for normal browsing, email, etc