GRC CareersAGJ, the AI governance job boardPost a Job

Jobs › Chief Information Security Officer (Cybersecurity)

Chief Information Security Officer (Cybersecurity)

Government Accountability Office

Job at a glance

Category
GRC
Work arrangement
On-site
Location
Washington, District of Columbia
Salary range
$151,661 to $223,045
Posted
Aug 23, 2026
Apply for this jobApplications go directly to Government Accountability Office
ShareEmailLinkedInXFacebookPrint / Save PDF

Government Accountability Office is hiring a Chief Information Security Officer (Cybersecurity) in Washington, District of Columbia. This is a GRC job in the governance, risk, and compliance field, with a posted range of $151,661 to $223,045. Review the full details below and apply directly with Government Accountability Office.

This position is located in the Government Accountability Office. As a Chief Information Security Officer (CISO) you will be responsible for the planning, governance, and coordination of all cybersecurity initiatives across GAO. The incumbent represents GAO in external forums to ensure a clear vision and message on GAO Initiatives and federal programs to help identify and address priority needs for cybersecurity risk management. Qualifications: Minimum Qualifications: The Senior Executive Service (SES) appointments require one year (52 weeks) of specialized experience at the next lower band/grade at the GS-14/GS-15 level, PE band level III, PT band levels III and IV, MS band levels I and II, Senior Executive Service, Senior Level (SL), or equivalent in the Federal Service, or comparable private/public sector. Executive Core Qualifications (ECQs): The ECQs assess executive experience and potential. They measure whether you have the executive skills needed to succeed in a variety of Senior Executive Service positions. ECQs can be submitted outside of the resume as additional documentation. Please address the following ECQs listed below. *NOTE*: For current SES applicants or applicants who have previously held an SES appointment, ECQs can be resume based. For applicants who has not held a previous SES appointment ECQ's are required (essay-based) responses for each ECQ is required to submitted as additional documentation outside of the resume. Leading Change: This core qualification involves the ability to bring about strategic change, both within and outside the organization, to meet organizational goals. Inherent to this ECQ is the ability to establish an organizational vision and to implement it in a continuously changing environment. Leading People: This core qualification involves the ability to lead people toward meeting the organizations vision, mission, and goals. Inherent to this ECQ is the ability to provide an inclusive workplace that fosters the development of others, facilitates cooperation and teamwork, and supports constructive resolution of conflicts. Results Driven: This core qualification involves the ability to meet organizational goals and customer expectations. Inherent to this ECQ is the ability to make decisions that produce high quality results by applying technical knowledge, analyzing problems, and calculating risks. Business Acumen: This core qualification involves the ability to manage human, financial, and information resources

Full responsibilities and requirements are on Government Accountability Office's application page.

Apply for this job →
About Government Accountability Office
Hiring for governance, risk, and compliance jobs on GRC Careers.
Search all Government Accountability Office jobs →

Location and market context

This job is based in Washington, District of Columbia on-site. Local candidates benefit from being close to Government Accountability Office's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.

About cybersecurity governance jobs

Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.

How to position yourself for this cybersecurity governance job

Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Government Accountability Office would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.

Similar GRC jobs

Information Technology Cybersecurity Specialist (INFOSEC)
American Battle Monuments Commission
Arlington, Virginia$122k to $158k
IT Cybersecurity Specialist (INFOSEC)
Office of the Secretary of Health and Human Services
Washington, District of Columbia$102k to $133k
Supervisory Cybersecurity Specialist
Naval Air Systems Command
Patuxent River, Maryland$144k to $187k
Supervisory IT Cybersecurity Specialist (INFOSEC)
Patent and Trademark Office
Alexandria, Virginia$169k to $197k
IT Cybersecurity Program Manager
Cybersecurity and Infrastructure Security Agency
Arlington, Virginia$85k to $133k
IT CYBERSECURITY SPECIALIST (INFOSEC)
Defense Information Systems Agency
Multiple Locations$101k to $141k
Get more jobs like this by email
We will email you new GRC jobs in Washington, District of Columbia as they post. Free and confidential, one click to unsubscribe.

Know your GRC? Take the 2-minute AI Governance Challenge. No signup needed.
Play now →

More GRC jobs: All GRC jobs · Search by category & location · All CISO & security-leadership jobs · CISO career guide