Director Of Information Security Jobs in District of Columbia
Director Of Information Security jobs in District of Columbia concentrate heavily in federal government contracting, defense intelligence, and financial services, making the District one of the most active markets in the country for senior cybersecurity leadership. Most openings are in Washington DC proper, with additional roles in Arlington and Bethesda, where major employers like Booz Allen Hamilton, Leidos, and SAIC maintain large operations. Cloud security governance, zero-trust architecture, and federal compliance frameworks like FedRAMP and FISMA are the most in-demand specialties across the region. Scan the live roles below and apply to whichever ones fit.
Find JobsOverview
Showing 5 of 74+ Director Of Information Security jobs
Tharros is seeking a Senior Information Systems Security Officer to support a DHS Intelligence and Analysis cybersecurity program in the National Capital Region.
This role will support ISSO operations across a complex Federal cybersecurity environment, including Assessment and Authorization, continuous monitoring, ATO package maintenance, POA&M management, security artifact quality, cloud and hybrid system support, and cybersecurity compliance. The ideal candidate is a hands-on ISSO who can maintain accurate authorization evidence, coordinate with technical teams, and help keep mission systems secure, compliant, and authorization-ready.
Responsibilities:
- Perform ISSO duties for assigned Federal information systems.
- Support RMF activities, including system categorization, control implementation support, assessment readiness, authorization package maintenance, and ongoing monitoring.
- Develop, review, validate, and maintain security artifacts such as SSPs, POA&Ms, risk exceptions, contingency plans, privileged user documentation, and privacy-related artifacts.
- Create, maintain, and monitor ATO packages in GRC tools.
- Support POA&M development, validation, remediation tracking, exception documentation, closure, and reporting.
- Collaborate with system owners, ISSOs, ISSMs, developers, engineers, assessors, and other stakeholders to address vulnerabilities, security findings, and remediation actions.
- Review vulnerability scan results and support recurring continuous monitoring activities.
- Support audit log review, alert response, and documentation of follow-up actions.
- Ensure assigned systems remain aligned with applicable cybersecurity policies, procedures, and decommissioning requirements.
- Support quarterly cybersecurity performance and compliance reporting.
- Provide ISSO support across hybrid environments, including classified and unclassified on-premise systems, cloud-based systems, DevSecOps environments, and agile development teams.
- Support security for operating systems and technologies including Linux, Windows, open-source operating systems, and cloud platforms.
- Support Cross Domain Solution security governance, assessment, and authorization activities.
- Help improve ISSO workflows, evidence management, POA&M tracking, continuous monitoring, and risk reporting through automation and repeatable processes.
- Translate compliance status, vulnerability data, and remediation progress into clear updates for technical and leadership stakeholders.
Requirements:
- Active Top Secret clearance with contingency on DOD CAS granting SCI eligibility.
- 10+ years of related cybersecurity experience.
- At least 2 years of recent experience in A&A, FISMA compliance, IC cybersecurity policy and standards, continuous monitoring, CDS, and secure cloud and hybrid engineering.
- Experience applying NIST 800 series, CNSSI 1253, security controls, and RMF principles.
- Experience with emerging security risk management practices, including automation of A&A and continuous monitoring activities.
- CISM, CAP, or GRC certification, or comparable demonstrable experience.
- Experience developing, reviewing, or maintaining SSPs, POA&Ms, risk exceptions, contingency plans, privileged user documentation, ATO packages, and continuous monitoring evidence.
- Experience working with GRC tools and coordinating with technical teams to remediate vulnerabilities and maintain authorization readiness.
- Strong written and verbal communication skills.
- Ability to work onsite at a Government-approved location as required.
Preferred Qualifications:
- Prior DHS, Intelligence Community, DoD, CISO office, ISSM, AO, SCA, or national security ISSO experience.
- Experience supporting large ISSO portfolios, classified systems, hybrid cloud environments, DevSecOps evidence collection, continuous monitoring, and audit readiness.
- Experience with Archer, eMASS, Xacta, ACAS, Tenable.sc, Splunk, GitLab, Axonius, STIG/SCAP validation, or related Federal cybersecurity tools.
- Experience with AWS, Microsoft Azure, Microsoft 365, or other cloud platforms.
- Experience supporting TS/SCI, SCIF, cross-domain, or secure mission environments.
See All 74 Director Of Information Security Jobs in District of Columbia
Find roles in District of Columbia that match your experience and apply in just a few clicks.
Find JobsDirector Of Information Security Jobs by City in District of Columbia
Where District of Columbia roles are concentrated, by current openings.
Director Of Information Security Job Market in District of Columbia
A snapshot from current District of Columbia openings, updated as new roles post.
Who's Hiring
What District of Columbia Employers Look For
The qualifications that appear most often in director of information security jobs across District of Columbia.
- Active security clearance at the Secret or Top Secret level required
- Ten or more years of progressive information security or cybersecurity leadership experience
- CISSP certification or equivalent advanced security credential strongly preferred
- Deep knowledge of federal compliance frameworks including FISMA, NIST, and FedRAMP
- Proven experience managing enterprise security operations, incident response, and risk programs
- Bachelor's degree in computer science, information systems, or a related technical field
Director Of Information Security Jobs in District of Columbia: Frequently Asked Questions
How do you become a director of information security in District of Columbia?
The path typically begins with a technical security role, followed by years of progressive responsibility in areas like risk management, security operations, or compliance. DC's market is heavily shaped by federal contracting, so candidates who obtain a government security clearance and earn credentials like CISSP gain a significant edge. Familiarity with federal frameworks such as NIST and FISMA is often a baseline expectation, not a differentiator, for senior roles here.
How much do director of information securities make in District of Columbia?
Director of information securities in District of Columbia earn a median of about $195,190 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $126,520 for the lowest 10% to over $286,280 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire director of information securitys in District of Columbia?
District of Columbia director of information security roles are posted by tharros, MANTECH, and Peraton and others right now, based on current listings on Migrate Mate as of November 2026. The DC market skews heavily toward defense contractors, federal agencies, and financial institutions headquartered in or near the District.
Which District of Columbia cities have the most director of information security jobs?
Washington, Bolling AFB, and Pentagon account for the largest share of director of information security openings in District of Columbia. Washington DC anchors the market as the seat of federal government and a hub for major contractors, while Arlington and Bethesda draw high-level security roles because of the dense concentration of defense agencies and large government IT firms operating just across the District line.
Are there remote director of information security jobs in District of Columbia?
Yes, and more than many senior roles, given how much of the work involves strategy, governance, and oversight rather than on-site operations. About 45% of director of information security openings tied to District of Columbia are remote or hybrid as of November 2026, though roles tied to classified environments or federal facilities typically require an on-site presence. Policy development, vendor management, and enterprise risk functions are the areas most likely to allow remote flexibility.
How can I get hired as a director of information security in District of Columbia with little or no experience?
The most realistic path is building foundational experience in a security analyst, IT auditor, or compliance analyst role within a DC-area government contractor or federal agency. Organizations like Booz Allen Hamilton and Leidos regularly hire at entry and mid-levels, giving candidates exposure to federal security environments that lead toward leadership tracks. Earning foundational certifications such as Security+ and then progressing toward CISSP, combined with obtaining a security clearance early, positions candidates for faster advancement into director-level roles.
Where can I find and apply to director of information security jobs in District of Columbia?
You can find and apply to director of information security jobs in District of Columbia on Migrate Mate, which lists current openings across the region. Search the available roles, find the ones that match your experience and target sector, and apply directly to the ones that fit.
See All 74 Director Of Information Security Jobs in District of Columbia
Find roles in District of Columbia that match your experience and apply in just a few clicks.
Find Jobs