Jobs › IT Specialist (CYBERSECURITY)
IT Specialist (CYBERSECURITY)
Job at a glance
- Category
- GRC
- Work arrangement
- On-site
- Location
- Arlington, Virginia
- Salary range
- $143,913 to $187,093
- Posted
- Aug 23, 2026
Defense Logistics Agency is hiring a IT Specialist (CYBERSECURITY) in Arlington, Virginia. This is a GRC job in the governance, risk, and compliance field, with a posted range of $143,913 to $187,093. Review the full details below and apply directly with Defense Logistics Agency.
See below for important information regarding this job. Qualifications: To qualify for an IT Specialist (Cybersecurity), your resume and supporting documentation must support: A. Specialized Experience: One year of specialized experience that equipped you with the particular competencies to successfully perform the duties of the position and is directly in or related to this position. To qualify at the GS-14 level, applicants must possess one year of specialized experience equivalent to the GS-13 level or equivalent under other pay systems in the Federal service, military, or private sector. Applicants must meet eligibility requirements, minimum qualifications, and any other regulatory requirements by the cut-off/closing date of the announcement. Creditable specialized experience includes: Serves as the senior technical authority for cybersecurity architecture and engineering across complex networks and critical industrial control systems (ICS/OT), including leading/implementing Zero Trust principals and providing expert guidance to leadership and technical teams. Develops and oversees security architecture requirements, policies, and reference designs for systems and networks, ensuring secure configuration management and alignment with organizational cybersecurity standards and governing directives. Leads security architecture and design activities, including control selection/implementation, security testing and analysis, participation in Risk Governance, and development of internal controls and mitigation strategies; assessing the security impact of new systems, integrations, and interfaces. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional, philanthropic, religious, spiritual, community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience. This is an Emergency Essential (EE) position. The incumbent will be designated Non-Combat Essential (NCE). In the event of a crisis, the incumbent may be required to deploy, within CONUS only, via temporary reassignment or be required to stay in place to support contingency operations. The incumbent may be required to take part in readiness exercises. This position
Full responsibilities and requirements are on Defense Logistics Agency's application page.
Apply for this job →Location and market context
This job is based in Arlington, Virginia on-site. Local candidates benefit from being close to Defense Logistics Agency's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.
About cybersecurity governance jobs
Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.
How to position yourself for this cybersecurity governance job
Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Defense Logistics Agency would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.
Similar GRC jobs
More GRC jobs: All GRC jobs · Search by category & location