Senior Level Information Security Associate Jobs
Senior level information security associate jobs place experienced professionals in charge of security architecture decisions, risk program ownership, and the cross-functional initiatives that protect enterprise systems. Openings cover 68% remote and hybrid arrangements across Technology & Software, Consulting & Professional Services, and Education, with employers like SentiLink, Match, and MTSI hiring at this level now.
Find JobsOverview
Showing 5 of 46+ Senior Level Information Security Associate jobs











Job Description:
Roles and Responsibilities
- Lead and develop a high-performing team that lives DXC’s values: Deliver, Do the right thing, Care, Collaborate, and Community.
- Own the data protection strategy and roadmap, including the projects that deliver it, and set priorities and milestones with senior leadership.
- Direct the design and implementation of data protection controls across business processes, with a focus on protecting intellectual property and sensitive data.
- Establish and govern data classification and sensitivity standards, and oversee the identification, classification, and protection of structured and unstructured data across cloud and on-premises environments.
- Lead Data Security Posture Management (DSPM) efforts to discover, inventory, and assess sensitive data across multi-cloud and SaaS environments, and to reduce exposure from over-permissioned access and shadow data.
- Define controls and governance for AI systems that process or generate company data, including data use in model training, retrieval-augmented generation, prompt and output handling, and third-party AI services.
- Ensure compliance with global data privacy and AI frameworks, including GDPR, and other state and national privacy laws, ITAR, NIST CSF and NIST AI RMF, and ISO/IEC 42001 where applicable, and translate their requirements into practical controls.
- Lead audit and assessment readiness, owning playbooks, evidence, and responses to internal audit, external auditors, and customer reviews.
- Produce executive-level reports and presentations on data protection, privacy, and AI risk that support investment and risk decisions.
- Approve and oversee knowledge articles, FAQs, procedures, and standards, and ensure they stay current.
- Oversee task tracking and stakeholder communication through tools such as Azure DevOps, with clear reporting on progress and risk.
- Sponsor and deliver training programs on data protection, privacy, and responsible AI use across the company.
- Coordinate with Internal Audit, Legal, Communications, and business leaders on data protection matters.
Skills and Attributes for Success
- Lead by example in applying DXC’s values, and build accountability and trust within the team.
- Strong people leadership: hire, coach, develop, and performance-manage a team of analysts and engineers.
- Expertise in audit readiness, governance, and documentation, with the ability to drive process improvement across teams.
- Working knowledge of IP protection strategies, including classification of trade secrets and proprietary code, access governance, and exfiltration prevention.
- Experience with AI security and governance concepts, including model and data lineage, AI usage policies, and risks such as data leakage through prompts, training data exposure, and unauthorized AI tools.
- Proficiency with Microsoft 365 and Azure security services, and familiarity with multi-cloud environments.
Requirements
- Bachelor’s degree in computer science, Information Systems Management, Engineering, or a similar discipline, or equivalent experience.
- Minimum of 6 years of experience in data protection, information security, or privacy, including at least 2 years in a leadership or people management role.
- Hands-on experience with data protection technologies, including data discovery, classification and labeling, data inventory, CASB, Microsoft Purview, information rights management, and data loss prevention.
- Experience managing Microsoft 365 DLP, Azure Information Protection, Insider Risk Management, Defender for Cloud Apps, Security Compliance, and Secure Score.
- Experience with DSPM platforms and multi-cloud data security.
- Working knowledge of data protection and privacy frameworks, including GDPR, HIPAA, NIST CSF, NIST AI RMF, and ITAR.
- Experience governing AI systems or AI-related data risk, and familiarity with emerging AI regulation and standards.
- Experience with IT service management and service desk integration.
- Excellent written and verbal communication skills, with the ability to present to executive audiences.
Compensation at DXC is influenced by an array of factors, including but not limited to the experience, job-related knowledge, skills, competencies, as well as contract-specific affordability and organizational requirements. A reasonable estimate of the current compensation range for this position is $165,500 - $307,300.
Full-time hires are eligible to participate in the DXC benefit program. DXC offers a comprehensive, flexible, and competitive benefits program which includes, but is not limited to, health, dental, and vision insurance coverage; employee wellness; life and disability insurance; a retirement savings plan, paid holidays, paid time off.
At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.
If you are an applicant from the United States, Guam, or Puerto Rico
DXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law. View postings below.
We participate in E-Verify. In addition to the posters already identified, DXC provides access to prospective employees for the Federal Minimum Wage Poster, Federal Polygraph Protection Act Poster as well as any state or locality specific applicant posters. To access the postings in the link below, select your state to view all applicable federal, state and locality postings. Postings are available in English, and in Spanish, where required. View postings below.
Disability Accommodations
If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us via email.
Please note: DXC will respond only to requests for accommodations due to a disability.
Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.
See All 46 Senior Level Information Security Associate Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsSenior Level Information Security Associate Job Market
Who's Hiring



Top Industries Hiring
- Technology & Software11
- Consulting & Professional Services8
- Education3
- Investment & Asset Management3
- Retail2
Senior Level Information Security Associate Jobs: Frequently Asked Questions
How do I get a senior level information security associate job?
Employers hiring at the senior level look for candidates who can own a security domain end to end, not just execute tasks. Demonstrating hands-on depth in areas like threat detection, vulnerability management, or compliance frameworks matters, but so does your ability to mentor junior analysts and communicate risk to non-technical stakeholders. Certifications such as CISSP or CISM strengthen a candidacy considerably at this stage.
Which companies hire senior level information security associates?
Companies hiring senior level information security associates right now include SentiLink, Match, and MTSI, based on current listings on Migrate Mate as of November 2026. Hiring at this level tends to concentrate in large enterprises, government contractors, and technology-driven organizations where security programs are mature and require experienced professionals to lead them.
Are there remote senior level information security associate jobs?
Yes, though availability varies by employer and industry. About 68% of senior level information security associate openings are remote or hybrid as of November 2026, reflecting broader adoption of distributed security teams. Roles involving classified data or on-site infrastructure support are more likely to require a physical presence, so check each listing carefully.
What makes an information security associate role senior level?
A senior level information security associate role is defined by scope and ownership. Senior professionals lead security initiatives rather than supporting them, own the design and enforcement of controls within a domain, and serve as the go-to resource for complex incidents or assessments. Mentoring junior team members and advising leadership on risk posture are consistent expectations that distinguish this tier from mid-level positions.
Which industries hire the most senior level information security associates?
Senior level information security associate roles concentrate in Technology & Software, Consulting & Professional Services, and Education, based on current listings on Migrate Mate as of November 2026. These sectors drive hiring at this level because they operate under strict regulatory requirements, manage sensitive data at scale, or maintain critical infrastructure that demands experienced security leadership.