Information Security Advisor Jobs
Information Security Advisor jobs are open across federal agencies, financial services, healthcare, and technology, from analyst to senior advisor and principal consultant, with specializations in risk management, compliance frameworks, and cloud security. Scan the live roles below and apply to whichever ones fit.
Find JobsOverview
Showing 5 of 16+ Information Security Advisor jobs
The New York City Department of Health and Mental Hygiene (DOHMH) is the nation's leading public health agency protecting and promoting health of all New Yorkers. Our 7,000-plus team members bring an extraordinary array of languages, cultures, and experiences to bear on the work of public health. Our diversity fuels creativity because all perspectives are heard and valued. DOHMH aims to improve the health outcomes of all New Yorkers by centering persistent racial inequities and promotion of social justice at the core of its work. The Division of Information Technology’s mission and vision is to promote and protect the health of all New Yorkers through the use of innovative technology and health information that is useful and available, such that we envision a city where all New Yorkers can realize their full health potential, regardless of who they are, where they are from or where they live.
***This is a grant-funded, on-site position ending in November 2027***
Overview
The Senior Advisor to the CISO supports the agency's mission by providing expert strategic, technical, and programmatic counsel to the Chief Information Security Officer. Through collaboration, sound risk management, and a practical understanding of operational needs, the Senior Advisor helps the CISO advance a modern cybersecurity program that balances security, operational resilience, governance, regulatory compliance, and business enablement, while protecting the agency's information assets and technology infrastructure.
The Senior Advisor to the CISO serves as a trusted advisor and key strategic partner to the Chief Information Security Officer. The Senior Advisor provides expert guidance on cybersecurity strategy, risk, governance, and incident readiness; leads high-priority initiatives and special projects on behalf of the CISO; and helps ensure the Office of Cybersecurity's priorities are carried out effectively and consistently.
The Senior Advisor works across the Cybersecurity Response, Cybersecurity Risk, and Cybersecurity Governance teams, and collaborates with Information Technology, business units, executive leadership, and external partners to align cybersecurity efforts with the agency's mission.
Job Duties:
Strategic Advisory
· Advise the CISO on cybersecurity strategy, program priorities, and the multi-year cybersecurity roadmap.
· Provide analysis and recommendations on cybersecurity risks, emerging threats, and mitigation strategies.
· Prepare briefings, decision memos, and presentations for the CISO and executive leadership.
· Track progress on the CISO's strategic priorities and identify issues requiring attention or escalation.
· Represent the CISO in meetings, working groups, audits, and engagements with regulatory agencies and external partners, as designated.
· Promote collaboration between cybersecurity, Information Technology, and business units to integrate security throughout the technology lifecycle.
Cybersecurity Response Support
· Advise the CISO on the effectiveness of the agency's cybersecurity response capabilities, including:
· Cybersecurity incident response and recovery.
· Security monitoring, threat detection, and analysis.
· Vulnerability management and remediation.
· Cyber incident preparedness, tabletop exercises, and operational readiness.
· Security automation and continuous operational improvement.
· Support the CISO during major incidents by coordinating information, tracking actions, and preparing executive communications.
Cybersecurity Risk Support
· Provide expert guidance to the CISO and the Cybersecurity Risk Team on:
· Enterprise cybersecurity risk assessments.
· Security reviews of applications, cloud services, infrastructure, and emerging technologies.
· Third-party and vendor security risk.
· Risk exception decisions and security architecture considerations.
· Enterprise cyber risk reporting and recommendations.
Cybersecurity Governance Support
· Advise the CISO on the agency's cybersecurity governance framework to support effective risk management, regulatory compliance, and strategic decision-making, including:
· Development and review of cybersecurity policies, standards, and procedures.
· Regulatory and compliance activities, including HIPAA, PCI DSS, NIST, and other applicable requirements.
· Internal and external audits and related corrective action plans.
· The agency's cybersecurity Risk Register and Plans of Action & Milestones (POA&M).
· Executive dashboards, cybersecurity metrics, and program performance reporting.
· Evaluating the effectiveness of the cybersecurity program and recommending continuous improvements.
Special Projects and Initiatives
· Lead high-priority, cross-functional cybersecurity initiatives and special projects as assigned by the CISO.
· Provide program management and coordination for strategic cybersecurity efforts.
· Research and evaluate emerging technologies, threats, and industry best practices, and recommend actions.
· Support budget planning, contract review, and vendor evaluations as requested by the CISO.
Strategic Responsibilities
· Contribute to the development and implementation of multi-year cybersecurity strategies and roadmaps.
· Support efforts to advance the maturity of the agency's cybersecurity governance program.
· Help strengthen enterprise cyber resilience and incident readiness.
· Promote security-by-design principles across technology initiatives.
· Help measure and communicate cybersecurity program performance using meaningful operational and risk metrics.
· Support organizational objectives by balancing security, operational efficiency, compliance, and business enablement.
Qualifications and Requirements:
· Bachelor's degree from an accredited college or university in Information Security, Computer Science, Information Technology, Business Administration, Public Administration, or a related field.
· Ten (10) years of progressively responsible experience in information technology or cybersecurity, including experience in cybersecurity operations, risk management, governance, incident response, and security program management.
· Five (5) years of experience in senior advisory, leadership, or program management role supporting cybersecurity or information technology programs.
Preferred Qualifications
· Master's degree in Cybersecurity, Information Technology, Business Administration, Public Administration, or a related field.
· Professional certifications such as CISSP, CISM, CRISC, CGEIT, or GIAC certifications.
· Experience within government, healthcare, or other highly regulated environments.
· Demonstrated experience implementing and managing cybersecurity frameworks such as the NIST Cybersecurity Framework, NIST SP 800-53, HIPAA Security Rule, PCI DSS, and CIS Critical Security Controls.
Knowledge, Skills & Abilities
· Strategic thinking and sound judgment as a trusted executive advisor.
· Strategic planning and cybersecurity program development.
· Enterprise cybersecurity governance and risk management.
Job Type: Full-time
Pay: $120,000.00 - $125,000.00 per year
Benefits:
- Health insurance
Work Location: In person
Information Security Advisor Jobs by Experience Level
See All 16 Information Security Advisor Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsInformation Security Advisor Job Market
Who's Hiring
- Peraton14
- General Dynamics Information Technology1
- Division of Information Technology - NYC Department of Health and Mental Hygiene1D
What Employers Look For
The qualifications that appear most often in information security advisor jobs.
- Five or more years of experience in information security, risk management, or a related field
- Proficiency with security frameworks such as NIST CSF, ISO 27001, or CIS Controls
- One or more certifications including CISSP, CISM, CISA, or CompTIA Security+
- Experience conducting risk assessments, vulnerability analyses, and security audits
- Familiarity with cloud security principles across AWS, Azure, or Google Cloud environments
- Strong written and verbal communication skills for advising non-technical stakeholders and leadership
Tips for Your Information Security Advisor Job Search
Align certifications to the posting's framework
Job postings for information security advisors often call out specific frameworks like NIST, ISO 27001, or FedRAMP. Mention the ones you hold prominently in your resume's skills section and mirror the exact acronym the posting uses.
Quantify risk reduction on your resume
Hiring managers in this field respond to outcomes, not duties. Replace phrases like 'advised on security posture' with specific results: how many controls you assessed, the size of the environment you covered, or the audit findings you helped resolve.
Apply early to roles that fit
Migrate Mate lists information security advisor openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Target postings by clearance level required
Federal and defense-adjacent information security advisor roles frequently require an active clearance. Filter your search by clearance level so you only spend time on roles your current clearance status actually supports.
Prepare a threat scenario walkthrough for interviews
Interviewers for information security advisor positions often present a real or hypothetical incident and ask how you'd advise leadership. Practice walking through a structured response that covers identification, communication, containment, and policy implications.
Negotiate scope alongside compensation
In advisory roles, your authority to enforce recommendations matters as much as pay. Ask during the offer stage whether the position has a reporting line to the CISO or board, since that determines how much your advice actually shapes decisions.
Information Security Advisor Jobs: Frequently Asked Questions
Which companies are hiring the most information security advisors?
The companies hiring the most information security advisors right now include Peraton, General Dynamics Information Technology, and Division of Information Technology - NYC Department of Health and Mental Hygiene, with the largest share of openings in District of Columbia, Alabama, and Virginia, based on current listings on Migrate Mate as of November 2026. Demand is especially concentrated in sectors with heavy compliance obligations such as financial services, healthcare, and federal contracting.
How many information security advisor jobs are remote?
About 0% of information security advisor openings are fully remote or hybrid as of November 2026, reflecting the advisory and consultative nature of many of these roles. Sub-areas focused on policy development, compliance program management, and virtual CISO engagements tend to offer the most location flexibility, while roles requiring on-site audits or hands-on systems access are more likely to be in-person.
How do you become an information security advisor?
Start by building a foundation in IT or cybersecurity through a degree in information systems, computer science, or a related field, then pursue certifications like CISSP or CISM to demonstrate advisory-level competence. Gain hands-on experience in security operations, risk assessment, or compliance roles, and develop the ability to communicate security risks clearly to non-technical leadership, since the advisory function depends heavily on that skill.
How do you get hired as an information security advisor with little experience?
Start in a security analyst, IT auditor, or compliance coordinator role to build practical exposure to risk frameworks and control assessments. Earning an entry-level certification such as CompTIA Security+ or the CISA establishes credibility early. Volunteering to present security findings to leadership, even informally, builds the communication skills that distinguish advisors from purely technical contributors and makes you a stronger candidate for advisory titles.
What does the information security advisor interview process look like?
Most employers run a screening call focused on your background with specific frameworks and industries, followed by a technical or scenario-based round where you walk through how you'd assess an organization's risk posture or advise on a policy gap. A final round typically involves a presentation to security leadership or business stakeholders, where your ability to translate technical findings into actionable recommendations is evaluated alongside your domain knowledge.
Where can I find and apply to information security advisor jobs?
You can find and apply to information security advisor jobs on Migrate Mate, which lists current openings from across the United States. Search the roles available, find the ones that match your experience and target industry, and apply directly to each listing that fits your background.
See All 16 Information Security Advisor Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs