GRC Careers: AI Governance, Risk and Compliance JobsConnecting Talent and Trust. Post a Job Log in

JobsVirginiaFalls ChurchLead Information Security Specialist

Lead Information Security Specialist

Defense Health Agency
CybersecurityTS/SCIOn-siteFull-timeFalls Church, Virginia$121785 - $158322 Per Year

Defense Health Agency is hiring for the job of Lead Information Security Specialist, Falls Church, Virginia (On-site). This is a Cybersecurity job in the governance, risk, and compliance field, with a posted range of $121785 - $158322 Per Year. Review the full details below and apply directly with Defense Health Agency.

Organization: Defense Health AgencyLocation: Falls Church, VirginiaWorkplace: On-siteFocus: CybersecuritySalary: $121785 - $158322 Per YearPosted: Sep 4, 2026
Defense Health Agency is hiring for this Cybersecurity job in Falls Church, one of the metros GRC Careers tracks for governance, risk, and compliance hiring. See other GRC jobs in Falls Church →

About the Position: This position serves as a Lead Information Security Specialist responsible for planning, directing, and executing multi-discipline security operations across the DHA enterprise, including information security, physical facility accreditation, communications security, and foreign disclosure administration. This is not a virtual/remote position. You must live within or be willing to relocate to a commutable distance of the identified duty location (Falls Church, VA).

Qualifications: Who May Apply: Only applicants who meet one of the employment authority categories below are eligible to apply for this job. You will be asked to identify which category or categories you meet, and to provide documents which prove you meet the category or categories you selected. 30 Percent or More Disabled Veterans Current Civilian Employees of the Defense Health Agency (DHA) Current Permanent Department of Defense (DoD) Civilian Employee Domestic Defense Industrial Base/Major Range and Test Facilities Base Civilian Personnel Workforce Executive Order (E.O.) 12721 Interagency Career Transition Assistance Plan Land Management Workforce Flexibility Act Military Spouses, under Executive Order (E.O.) 13473 Non-Appropriated Fund Instrumentality (NAFI) Non-Department of Defense (DoD) Transfer Office of Personnel Management (OPM) Interchange Agreement Eligible People with Disabilities, Schedule A Priority Placement Program, DoD Military Reserve (MR) and National Guard (NG) Technician Eligible Priority Placement Program, DoD Military Spouse Preference (MSP) Eligible Priority Placement Program, DoD MR and NG Preference Eligible Tech Receiving Disability Retirement Priority Placement Program, DoD Retained Grade Preference Eligible Reinstatement Veterans Employment Opportunity Act (VEOA) of 1998 In order to qualify, you must meet the experience requirements described below. Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community; student; social). You will receive credit for all qualifying experience, including volunteer experience. Your resume must clearly describe your relevant experience; if qualifying based on education, your transcripts will be required as part of your application. Additional information about transcripts is in this document. Specialized Experience: One year of specialized experience which includes evaluating secure facilities (such as Sensitive Compartmented Information Facilities or Collateral Open Storage areas) for compliance with physical security standards; investigating security incidents or unauthorized disclosures to identify organizational vulnerabilities; AND processing foreign national visit requests for compliance with international disclosure directives. This definition of specialized experience is typical of work performed at the next lower grade/level position in the federal service (GS-12). Some federal jobs allow you to substitute your education for the required experience in order to qualify. For this job, you must meet the qualification requirement using experience alone--no substitution of education for experience is permitted. Time in Grade Requirement: Applicants who have held a General Schedule (GS) position within the last 52 weeks must have 52 weeks of Federal service at the next lower grade or equivalent (GS-12).

Location and market context

This job is based in Falls Church on-site. Local candidates benefit from being close to Defense Health Agency's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.

About cybersecurity governance jobs

Cybersecurity governance connects security control frameworks to business and regulatory risk, covering policy, risk assessment, and control assurance rather than hands-on operations. Jobs like this one are typically evaluated against frameworks such as NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices.

How to position yourself for this cybersecurity governance job

Strong candidates emphasize security control frameworks, risk assessment, policy and standards, and translating technical security posture into governance and board-level reporting. In your resume and outreach, tie your experience to how Defense Health Agency would apply NIST CSF, ISO/IEC 27001, SOC 2, and security risk and control-assurance practices, and lead with concrete outcomes rather than duties.

Similar GRC jobs

More jobs at Defense Health Agency

More GRC jobs in Falls Church

Hiring for Cybersecurity?

Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.

Post a job  Pricing from $99 · About GRC Careers · Hiring toolkit

Want to be next in a job like this?

Jobs like Lead Information Security Specialist in Falls Church, Virginia open regularly. Be first to know, privately. No current employer ever sees you looking.

New Cybersecurity jobs, the moment they post.

One click unsubscribe.
Know your GRC? Take the 2-minute AI Governance Challenge. No signup needed.
Play now →

Employer, or see something wrong with this posting? Report this posting and we will review it promptly.