GRC Careers: AI Governance, Risk and Compliance JobsConnecting Talent and Trust. Post a Job Log in

JobsVirginiaWashington, DCDeputy Chief Information Security Officer

Deputy Chief Information Security Officer

Office of the Secretary of Defense
CybersecurityOn-siteFull-timePentagon, Arlington, Virginia$186207 - $228000 Per Year

Office of the Secretary of Defense is hiring for the job of Deputy Chief Information Security Officer, Pentagon, Arlington, Virginia (On-site). This is a Cybersecurity job in the governance, risk, and compliance field, with a posted range of $186207 - $228000 Per Year. Review the full details below and apply directly with Office of the Secretary of Defense.

Organization: Office of the Secretary of DefenseLocation: Pentagon, Arlington, VirginiaWorkplace: On-siteFocus: CybersecuritySalary: $186207 - $228000 Per YearPosted: Sep 21, 2026
Office of the Secretary of Defense is hiring for this Cybersecurity job in Pentagon, one of the metros GRC Careers tracks for governance, risk, and compliance hiring. See other GRC jobs in Pentagon →

The Deputy Chief Information Security Officer leads a staff comprised of GS, GG, military, and contractor personnel, providing executive leadership, management, and oversight of Department-wide activities related to the Cybersecurity Framework functions of Identity, Protect, Detect, Respond, and Recover; cybersecurity workforce; Defensive Cyber Operations; cybersecurity integration, governance, and assurance; and cybersecurity for Internet of Things, Operational Technology, and weapons systems.

Qualifications: Candidates should be committed to improving the efficiency of the Federal government, passionate about the ideals of our American republic, and committed to upholding the rule of law and the United States Constitution. Candidates will not be hired based on their race, sex, color, religion, or national origin. To meet the minimum qualification requirements for this position, you must show that you possess the Executive Core Qualifications (ECQ), and Technical Qualifications (TQ) related to this position within your resume - NOT TO EXCEED 2 PAGES. Resumes over the 2-page limit will be disqualified. Please see "Required Documents" section below for all resume formatting requirements. Your resume should include examples of experience, education, and accomplishments applicable to the qualification(s). If your resume does not reflect demonstrated evidence of these qualifications, you may not receive consideration for the position. Do NOT submit a separate narrative statement specifically addressing the Executive Core Qualifications (ECQs) or the Technical Qualifications (TQs). TECHNICAL QUALIFICATIONS (TQs): Your resume should demonstrate accomplishments that would satisfy the technical qualifications: TQ 1: Extensive knowledge and experience leading and managing cybersecurity programs, policies, operations, and resources in support of large-scale cybersecurity missions, including cryptographic modernization, identity management solutions, Public Key Infrastructure, Cross Domain Solutions, Key Management Infrastructure, and post-quantum cryptography. TQ 2: Demonstrated knowledge and experience orchestrating the strategic alignment, deployment, and oversight of modernized Cybersecurity and Defensive Cyber Operations, ensuring enterprise-wide readiness and protection of vital critical asset infrastructures. EXECUTIVE CORE QUALIFICATIONS (ECQs): In addition to the Technical Qualification Requirements listed above, all new entrants into the Senior Executive Service (SES) under a career appointment will be assessed for executive competency against the following five mandatory ECQs. If your 2-page resume does not reflect demonstrated evidence of the ECQs and TQs, you may not receive further consideration for the position. There are five ECQs: ECQ 1: Commitment to the Rule of Law and the Principles of the American Founding - This core qualification requires a demonstrated knowledge of the American system of government, commitment to uphold the Constitution and the rule of law, and commitment to serve the American people. Sub-Competencies: Knowledge of the American System of Government: Demonstrates understanding and appreciation of the American system of government, including the Constitution, the Bill of Rights, separation of powers, federalism, and the historical development of the American Nation. Commitment to the Rule of Law: Upholds the principles of the American Founding, including equality under the law and democratic self-government. Ensures the law is applied fairly and consistently. Civic-Mindedness: Stays up-to-date on important developments in American government and aligns organizational objectives and practices with presidential and public interests. Demonstrates a commitment to serve the American people. ECQ 2: Driving Efficiency - This core qualification involves the demonstrated ability to strategically and efficiently manage resources, budget effectively, cut wasteful spending, and pursue efficiency through process and technological upgrades. Sub-Competencies: Fiscal Responsibility: Strategically manages, allocates and monitors financial resources. Aligns priorities and initiatives to justify budget proposals. Monitors expenditures, cuts unnecessary costs, and uses cost-benefit analysis to set priorities. Managing Resources: Manages resources efficiently and effectively based on current and projected organizational goals, skills, budget considerations, and staffing needs. Leveraging Technology: Explores emerging technology and potential applications. Incorporates technology to enhance efficiency and achieve results. Ensures access to and security of technology systems. ECQ 3: Merit and Competence - This core qualification involves the demonstrated knowledge, ability and technical competence to effectively and reliably produce work that is of exceptional quality. Sub-Competencies: Technical Skill: Possesses the requisite technical knowledge and subject matter expertise to consistently produce timely, high-quality work. Is considered a strong contributor in his or her domain. Problem Solving: Engages in critical and data-driven thinking when diagnosing root causes and evaluating options. Identifies and promptly addresses the most pressing, high-priority problems. Agility and Resilience: Anticipates and adapts to change, new ideas, new information, and new conditions. Is committed to continuous improvement. Deals effectively with pressure and remains optimistic and persistent, even under adversity. ECQ 4: Leading People - This core qualification involves the demonstrated ability to lead and inspire a group toward meeting the organization's vision, mission, and goals, and to drive a high-performance, high-accountability culture. This includes, when necessary, the ability to lead people through change and to hold individuals accountable. Sub-Competencies: Accountability: Ensures that employees are appropriately recruited, selected, appraised, trained, and retained. Takes swift ac

Location and market context

This job is based in Pentagon on-site. Local candidates benefit from being close to Office of the Secretary of Defense's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.

About cybersecurity governance jobs

Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.

How to position yourself for this cybersecurity governance job

Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Office of the Secretary of Defense would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.

Similar GRC jobs

Hiring for Cybersecurity?

Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.

Post a job  Pricing from $99 · About GRC Careers · Hiring toolkit

Want to be next in a job like this?

Jobs like Deputy Chief Information Security Officer in Pentagon, Arlington, Virginia open regularly. Be first to know, privately. No current employer ever sees you looking.

New Cybersecurity jobs, the moment they post.

One click unsubscribe.
Know your GRC? Take the 2-minute AI Governance Challenge. No signup needed.
Play now →

Employer, or see something wrong with this posting? Report this posting and we will review it promptly.