Information Security Manager Jobs in District of Columbia
Information Security Manager jobs in District of Columbia are concentrated in Washington DC, with additional demand in nearby Arlington and Bethesda, where federal agencies, defense contractors, and major institutions like Booz Allen Hamilton, Leidos, and CISA drive consistent hiring at the senior and leadership level. The most in-demand specialties include federal security compliance, cloud security architecture, and zero-trust implementation, reflecting the district's heavy reliance on government-adjacent work. District of Columbia is among the most active markets in the country for this role. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 74+ Information Security Manager jobs
Tharros is seeking a Senior Information Systems Security Officer to support a DHS Intelligence and Analysis cybersecurity program in the National Capital Region.
This role will support ISSO operations across a complex Federal cybersecurity environment, including Assessment and Authorization, continuous monitoring, ATO package maintenance, POA&M management, security artifact quality, cloud and hybrid system support, and cybersecurity compliance. The ideal candidate is a hands-on ISSO who can maintain accurate authorization evidence, coordinate with technical teams, and help keep mission systems secure, compliant, and authorization-ready.
Responsibilities:
- Perform ISSO duties for assigned Federal information systems.
- Support RMF activities, including system categorization, control implementation support, assessment readiness, authorization package maintenance, and ongoing monitoring.
- Develop, review, validate, and maintain security artifacts such as SSPs, POA&Ms, risk exceptions, contingency plans, privileged user documentation, and privacy-related artifacts.
- Create, maintain, and monitor ATO packages in GRC tools.
- Support POA&M development, validation, remediation tracking, exception documentation, closure, and reporting.
- Collaborate with system owners, ISSOs, ISSMs, developers, engineers, assessors, and other stakeholders to address vulnerabilities, security findings, and remediation actions.
- Review vulnerability scan results and support recurring continuous monitoring activities.
- Support audit log review, alert response, and documentation of follow-up actions.
- Ensure assigned systems remain aligned with applicable cybersecurity policies, procedures, and decommissioning requirements.
- Support quarterly cybersecurity performance and compliance reporting.
- Provide ISSO support across hybrid environments, including classified and unclassified on-premise systems, cloud-based systems, DevSecOps environments, and agile development teams.
- Support security for operating systems and technologies including Linux, Windows, open-source operating systems, and cloud platforms.
- Support Cross Domain Solution security governance, assessment, and authorization activities.
- Help improve ISSO workflows, evidence management, POA&M tracking, continuous monitoring, and risk reporting through automation and repeatable processes.
- Translate compliance status, vulnerability data, and remediation progress into clear updates for technical and leadership stakeholders.
Requirements:
- Active Top Secret clearance with contingency on DOD CAS granting SCI eligibility.
- 10+ years of related cybersecurity experience.
- At least 2 years of recent experience in A&A, FISMA compliance, IC cybersecurity policy and standards, continuous monitoring, CDS, and secure cloud and hybrid engineering.
- Experience applying NIST 800 series, CNSSI 1253, security controls, and RMF principles.
- Experience with emerging security risk management practices, including automation of A&A and continuous monitoring activities.
- CISM, CAP, or GRC certification, or comparable demonstrable experience.
- Experience developing, reviewing, or maintaining SSPs, POA&Ms, risk exceptions, contingency plans, privileged user documentation, ATO packages, and continuous monitoring evidence.
- Experience working with GRC tools and coordinating with technical teams to remediate vulnerabilities and maintain authorization readiness.
- Strong written and verbal communication skills.
- Ability to work onsite at a Government-approved location as required.
Preferred Qualifications:
- Prior DHS, Intelligence Community, DoD, CISO office, ISSM, AO, SCA, or national security ISSO experience.
- Experience supporting large ISSO portfolios, classified systems, hybrid cloud environments, DevSecOps evidence collection, continuous monitoring, and audit readiness.
- Experience with Archer, eMASS, Xacta, ACAS, Tenable.sc, Splunk, GitLab, Axonius, STIG/SCAP validation, or related Federal cybersecurity tools.
- Experience with AWS, Microsoft Azure, Microsoft 365, or other cloud platforms.
- Experience supporting TS/SCI, SCIF, cross-domain, or secure mission environments.
See All 74 Information Security Manager Jobs in District of Columbia
Find roles in District of Columbia that match your experience and apply in just a few clicks.
Find JobsInformation Security Manager Jobs by City in District of Columbia
Where District of Columbia roles are concentrated, by current openings.
Information Security Manager Job Market in District of Columbia
A snapshot from current District of Columbia openings, updated as new roles post.
Who's Hiring
What District of Columbia Employers Look For
The qualifications that appear most often in information security manager jobs across District of Columbia.
- Active security clearance at the Secret or Top Secret level required by most DC employers
- CISSP or equivalent certification strongly preferred across federal and contractor roles
- Bachelor's degree in information security, computer science, or a related technical field
- Seven or more years of progressive experience in cybersecurity or information assurance
- Demonstrated experience with NIST frameworks, RMF, and federal compliance standards
- Proven ability to manage security operations teams and lead incident response programs
Information Security Manager Jobs in District of Columbia: Frequently Asked Questions
How do you become a information security manager in District of Columbia?
Information security managers in District of Columbia do not need a state-issued license, but the path to hiring here is shaped by federal requirements. Most roles require a security clearance processed through federal channels, along with credentials like the CISSP or CISM. Employers typically want a bachelor's degree in a technical field and several years in cybersecurity roles. Experience with the Risk Management Framework and federal agency environments gives candidates a clear advantage in the DC market.
How much do information security managers make in District of Columbia?
Information security managers in District of Columbia earn a median of about $195,190 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $126,520 for the lowest 10% to over $286,280 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire information security managers in District of Columbia?
Employers hiring information security managers in District of Columbia right now include tharros, MANTECH, and Peraton, based on current listings on Migrate Mate as of November 2026. The DC market is particularly active among federal contractors, defense agencies, and civilian government departments that maintain large in-house security programs.
Which District of Columbia cities have the most information security manager jobs?
The cities with the most information security manager openings in District of Columbia are Washington, Bolling AFB, and Pentagon. Washington DC anchors the market as home to federal agencies and major contractors, while Arlington and Bethesda attract significant demand from defense firms and health-focused government bodies like NIH and HHS with large, permanent security teams.
Are there remote information security manager jobs in District of Columbia?
Yes, though the federal and contractor nature of much DC work limits fully remote options more than in other markets. About 45% of information security manager openings tied to District of Columbia are remote or hybrid as of November 2026, reflecting clearance and on-site requirements common in government settings. Strategic, policy-focused, and compliance-oriented portions of the role are most likely to offer remote flexibility.
How can I get hired as a information security manager in District of Columbia with little or no experience?
The most realistic entry path in DC is moving into a security analyst or IT auditor role at a federal contractor or agency, then building toward management. Large employers like Booz Allen Hamilton and Leidos regularly bring on entry-level analysts through structured associate programs. Earning a CompTIA Security+ or initiating a clearance sponsorship early matters significantly here. Transitioning from adjacent roles in IT governance, network administration, or compliance within a federal environment is a well-established route to management.
Where can I find and apply to information security manager jobs in District of Columbia?
You can find and apply to information security manager jobs in District of Columbia on Migrate Mate, which lists current openings in the district. Find roles that fit your experience and clearance level and apply directly to the employers posting them.
See All 74 Information Security Manager Jobs in District of Columbia
Find roles in District of Columbia that match your experience and apply in just a few clicks.
Find Jobs