Chief Information Security Officer (CISO)

Department of the Air Force Headquarters • Arlington, VA

15h

About The Position

The Chief Information Security Officer (CISO) for the Department of the Air Force directs cybersecurity strategy and cyber defense programs across the U.S. Air Force and U.S. Space Force. The CISO advises senior leaders, shapes enterprise-wide cybersecurity policies, and works to ensure the resilience of global operations and systems against emerging cyber threats. The role manages and directs all aspects of Department of the Air Force cybersecurity staff functions, serving as the lead cybersecurity advisor and establishing Department-wide cybersecurity strategies and policies.

The CISO directs a comprehensive cybersecurity program to protect the confidentiality, integrity, and availability of supporting information systems; establishes and oversees policies and procedures based on the DoD Risk Management Framework; serves as the Department's Senior Agency Official for Privacy and Senior Agency Official for Records Management; and leads the development and prioritization of cyberspace operational capability requirements and doctrine. The position also directs security awareness and training, incident response processes, real-time cyber defense operations, and cyber command and control integration.

The role collaborates with executive-level experts, Defense Industrial Base representatives, and academia to identify strategic gaps and leverage emerging cybersecurity technologies. It advises senior leaders, including the DoD, Joint Staff, and Combatant Commands, on cybersecurity trends, metrics, and cyber defense planning. The CISO provides executive supervision, guidance, and leadership for four divisions of military, civilian, and contractor personnel.

Requirements

• U.S. citizenship is required.
• Must meet applicable Selective Service registration requirements for males.
• Mobility is a condition of employment; SES appointees must sign a Reassignment Rights and Obligations Agreement.
• Selected candidate must file an Executive Personnel Financial Disclosure Report (OGE Form 278).
• Position is Critical-Sensitive; the selectee must have or be able to obtain a Top Secret clearance.
• Must pass required pre-appointment urinalysis and be subject to random drug testing.
• Must be able to travel, including on short notice, under the DoD Joint Travel Regulations.
• May be required to work outside normal duty hours, including weekends, to support exercises and crisis planning.
• A career SES appointee must successfully complete a one-year probationary period.
• Must attend the Air Force Senior Leader Orientation Course, generally within 12 months of appointment, subject to availability.
• Must possess or be willing to obtain Cybersecurity Workforce Management certification (8570.01 IAM Level III) or equivalent within one year of appointment.
• Resume must be no more than two pages and demonstrate relevant education, experience, accomplishments, Technical Qualifications, and Executive Core Qualifications.
• Demonstrated senior executive experience leading enterprise-wide cybersecurity strategy, governance, and risk management in a large, complex organization.
• Demonstrated ability to establish cybersecurity policies, standards, and accountability frameworks; align security investments with mission objectives; and advise executives on cyber risk, risk acceptance, and resource allocation.
• Demonstrated ability to influence enterprise decisions, drive organizational change, and make measurable improvements in cybersecurity posture and resilience.
• Demonstrated senior executive experience overseeing complex cybersecurity programs and operations that protect mission-critical systems, networks, data, and services.
• Demonstrated experience directing enterprise cyber defense, vulnerability and exposure management, incident response, and security modernization initiatives.
• Demonstrated ability to integrate cybersecurity into enterprise technology architectures and operations, and translate threat intelligence and operational risk into prioritized action.
• Demonstrated ability to lead multidisciplinary organizations, establish accountability, and deliver measurable risk reduction and operational resilience across a distributed enterprise.
• Demonstrated senior executive experience leading large, multidisciplinary organizations through complex cybersecurity transformation.
• Demonstrated ability to align organizational structures, authorities, resources, and performance measures with enterprise priorities; influence senior stakeholders; and overcome institutional barriers.
• Demonstrated ability to establish accountability, develop executive talent, and lead sustained organizational change.
• Demonstrated commitment to the Constitution, rule of law, and service to the American people; ability to manage resources efficiently; technical competence; ability to lead people; and ability to achieve organizational results.
• Must demonstrate an enterprise perspective and the ability to work with internal and external partners in support of national security objectives.

Nice To Haves

• A bachelor's or master's degree in an information technology-related field, such as cybersecurity, computer science, data science, or information systems, is desired.
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and/or Certified Information Systems Auditor (CISA) certification is highly desired.
• Existing SES status, SES reinstatement eligibility, or certification through an OPM-approved SES Candidate Development Program may support noncompetitive appointment; proof must be attached when applicable.

Responsibilities

• Direct and manage a Department of the Air Force-wide cybersecurity program to protect the confidentiality, integrity, and availability of supporting information systems.
• Establish and oversee policies and procedures based on the DoD Risk Management Framework to identify, assess, and mitigate information security risks.
• Serve as the Department of the Air Force Senior Agency Official for Privacy (SAOP) and Senior Agency Official for Records Management (SAORM).
• Lead the development, validation, and prioritization of cyberspace operational capability requirements and doctrine.
• Direct enterprise security awareness and training programs for personnel and contractors, and oversee periodic testing of security controls.
• Establish processes to detect and report cybersecurity incidents, respond rapidly, and correct identified policy or practice deficiencies.
• Engage in real-time cyber defense operations and cyber command and control to integrate global effects.
• Collaborate with executive-level experts, Defense Industrial Base representatives, and academia to identify strategic gaps and leverage emerging cybersecurity technologies.
• Advise senior leaders, including DoD, Joint Staff, and Combatant Commands, on cybersecurity trends, metrics, and cyber defense planning.
• Provide executive supervision, guidance, and leadership for four divisions comprising military, civilian, and contractor personnel.

Benefits

• Comprehensive federal employee benefits package for eligible employees.
• Permanent Change of Station (PCS) relocation costs are authorized in accordance with the Joint Travel Regulations.
• Recruitment or relocation incentive may be offered.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive