Jobs › Chief Information Security Officer (Cybersecurity)
Chief Information Security Officer (Cybersecurity)
Job at a glance
- Category
- GRC
- Work arrangement
- On-site
- Location
- Washington, District of Columbia
- Salary range
- $151,661 to $223,045
- Posted
- Aug 23, 2026
Government Accountability Office is hiring a Chief Information Security Officer (Cybersecurity) in Washington, District of Columbia. This is a GRC job in the governance, risk, and compliance field, with a posted range of $151,661 to $223,045. Review the full details below and apply directly with Government Accountability Office.
This position is located in the Government Accountability Office. As a Chief Information Security Officer (CISO) you will be responsible for the planning, governance, and coordination of all cybersecurity initiatives across GAO. The incumbent represents GAO in external forums to ensure a clear vision and message on GAO Initiatives and federal programs to help identify and address priority needs for cybersecurity risk management. Qualifications: Minimum Qualifications: The Senior Executive Service (SES) appointments require one year (52 weeks) of specialized experience at the next lower band/grade at the GS-14/GS-15 level, PE band level III, PT band levels III and IV, MS band levels I and II, Senior Executive Service, Senior Level (SL), or equivalent in the Federal Service, or comparable private/public sector. Executive Core Qualifications (ECQs): The ECQs assess executive experience and potential. They measure whether you have the executive skills needed to succeed in a variety of Senior Executive Service positions. ECQs can be submitted outside of the resume as additional documentation. Please address the following ECQs listed below. *NOTE*: For current SES applicants or applicants who have previously held an SES appointment, ECQs can be resume based. For applicants who has not held a previous SES appointment ECQ's are required (essay-based) responses for each ECQ is required to submitted as additional documentation outside of the resume. Leading Change: This core qualification involves the ability to bring about strategic change, both within and outside the organization, to meet organizational goals. Inherent to this ECQ is the ability to establish an organizational vision and to implement it in a continuously changing environment. Leading People: This core qualification involves the ability to lead people toward meeting the organizations vision, mission, and goals. Inherent to this ECQ is the ability to provide an inclusive workplace that fosters the development of others, facilitates cooperation and teamwork, and supports constructive resolution of conflicts. Results Driven: This core qualification involves the ability to meet organizational goals and customer expectations. Inherent to this ECQ is the ability to make decisions that produce high quality results by applying technical knowledge, analyzing problems, and calculating risks. Business Acumen: This core qualification involves the ability to manage human, financial, and information resources
Full responsibilities and requirements are on Government Accountability Office's application page.
Apply for this job →Location and market context
This job is based in Washington, District of Columbia on-site. Local candidates benefit from being close to Government Accountability Office's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.
About cybersecurity governance jobs
Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.
How to position yourself for this cybersecurity governance job
Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Government Accountability Office would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.
Similar GRC jobs
More GRC jobs: All GRC jobs · Search by category & location · All CISO & security-leadership jobs · CISO career guide