ZipRecruiter

Log In

1

Chief Information Security Jobs (NOW HIRING)

Pcaobus

Chief Information Security Officer

New York, NY

$248K - $400K/yr

Commuter benefits - Tax-free employer subsidy and pretax employee deductions Position Summary The PCAOB has a full-time position for a Chief Information Security Officer (CISO) in the Office of ...

Sciens Building Solutions

NY · On-site

Chief Information Security Officer page is loaded## Chief Information Security Officerlocations: FL - State-wide Remoteposted on: Posted Todayjob requisition id: R-100797**CHIEF INFORMATION SECURITY ...

ULINE

Chief Information Security Officer

Glenview, IL · On-site

Chief Information Security Officer Corporate Headquarters 12575 Uline Drive, Pleasant Prairie, WI 53158 Lead security. Manage risk. Support operations. Uline is seeking a Chief Information Security ...

next page

Showing results 1-20

All JobsTechnology JobsInformation Technology JobsCIO JobsChief Information Security Jobs

Chief Information Security information

See salary details

$70K

$148.7K

$232.5K

How much do chief information security jobs pay per year?

As of Aug 18, 2026, the average yearly pay for chief information security in the United States is $148,746.00, according to ZipRecruiter salary data. Most workers in this role earn between $118,000.00 and $167,500.00 per year, depending on experience, location, and employer.

What is a chief information security officer?

A Chief Information Security Officer (CISO) is a senior executive responsible for establishing and maintaining an organization's vision, strategy, and programs to ensure information assets and technologies are adequately protected. The CISO oversees the development and implementation of security policies, manages risk, and ensures compliance with relevant laws and regulations. They also lead incident response efforts and work closely with other departments to foster a culture of security throughout the organization.

What are some common challenges a chief information security officer faces when balancing security initiatives with business objectives?

A Chief Information Security Officer (CISO) often navigates the challenge of aligning robust security measures with the organization's strategic goals. This requires balancing the need to protect sensitive data and systems without hindering business agility or innovation. CISOs must communicate risks effectively to executives and stakeholders, ensuring that security investments are prioritized appropriately. Additionally, they frequently lead cross-functional teams and must stay updated on evolving threats to anticipate and mitigate potential risks while supporting business growth.

What are the key skills and qualifications needed to thrive as a chief information security officer, and why are they important?

To thrive as a Chief Information Security Officer (CISO), you need deep expertise in information security, risk management, and cybersecurity frameworks, typically supported by a bachelor's or master's degree in a related field and professional certifications like CISSP or CISM. Familiarity with tools such as SIEM platforms, vulnerability assessment systems, and regulatory compliance software is essential. Outstanding leadership, communication, and strategic thinking are crucial soft skills for managing teams and influencing organizational security culture. These competencies are vital for protecting organizational assets, ensuring regulatory compliance, and guiding effective responses to emerging cyber threats.

What is the difference between Chief Information Security vs Cybersecurity Manager?

AspectChief Information SecurityCybersecurity Manager
CertificationsCISSP, CISM, CISACISSP, CISM, CISA (common)
Work EnvironmentExecutive leadership, strategic planningOperational security teams, project management
Employer & Industry UsageLarge corporations, government agenciesMedium to large organizations, tech firms
Search & Comparison IntentStrategic security leadershipSecurity team management

The Chief Information Security Officer (CISO) focuses on strategic security policies and executive decision-making, while a Cybersecurity Manager handles day-to-day security operations and team management. Both roles require similar certifications and are vital in protecting organizational assets, but they differ mainly in scope and level of responsibility.

More about Chief Information Security jobs

What cities are hiring for Chief Information Security jobs?

Cities with the most Chief Information Security job openings:

What states have the most Chief Information Security jobs?

States with the most job openings for Chief Information Security jobs include:

What job categories do people searching Chief Information Security jobs look for?

The top searched job categories for Chief Information Security jobs are:

Chief Information Security jobs near you
Infographic showing various Chief Information Security job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 73% Full Time, 23% Part Time, and 3% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $148,746 per year, or $71.5 per hour.

Chief Information Security Officer

Lancaster County

Lancaster, PA • On-site

$103K - $154K/yr

Full-time

Medical, Retirement, PTO

Posted 5 days ago

Job description

Compensation Range:
$103,077.00 - $154,596.00
Our full-time positions come with an array of excellent benefits including comprehensive healthcare coverage, a pension plan, flexible spending accounts and even a tuition reimbursement program.
At Lancaster County, we understand the importance of work-life balance. That's why we offer paid time off for sick, vacation and holidays, an employee assistance program, and family medical leave.
If you're passionate about making a difference, apply today to join us in serving the community!
Job Description:
JOB SUMMARY
  • The Chief Information Security Officer (CISO) provides strategic leadership and oversight of the County's enterprise cybersecurity, information security, risk management, and cyber resilience programs. Working closely with the CIO and Deputy CIO, the CISO is responsible for protecting County information, technology systems, networks, applications, cloud services, and other digital assets from cybersecurity threats and ensuring appropriate safeguards are established across County operations.
  • The CISO develops and maintains Countywide cybersecurity policies, standards, and security architecture; assesses and manages cybersecurity risk; oversees vulnerability management and security monitoring; directs cybersecurity incident response; evaluates third-party and emerging technology risks; and advises County leadership regarding cybersecurity threats, risks, regulatory requirements, and recommended mitigation strategies.
  • The position provides leadership and oversight for compliance with applicable cybersecurity, privacy, and information-protection requirements, including CJIS, HIPAA, and other federal, state, and local requirements. The CISO also develops and oversees the Countywide security awareness and training program and coordinates cybersecurity activities with County departments, technology providers, government partners, law enforcement, and other external organizations.
  • The CISO provides cybersecurity oversight for the County's business continuity and disaster recovery programs and coordinates with County departments to promote organizational resilience and continuity of critical technology services.
  • This position is designated essential and may be required to respond to cybersecurity incidents, technology outages, natural disasters, or other emergencies outside normal business hours and when County offices are closed.

REPORTING RELATIONSHIPS
  • The Chief Information Security Officer supervises a staff of Security Technicians, Systems & Security Engineers, and IT Security Analysts.
  • The Chief Information Security Officer reports directly to the Chief Information Officer.

ESSENTIAL JOB FUNCTIONS
  • Develop, implement, maintain, and enforce Countywide cybersecurity and information security policies, standards, procedures, and technical security requirements consistent with the strategic direction established by the CIO.
  • Lead the County's cybersecurity and information security program, including security governance, risk management, security architecture, vulnerability management, threat detection, incident response, identity and access security, data protection, and security awareness.
  • Identify, assess, prioritize, and communicate cybersecurity risks and vulnerabilities and coordinate appropriate mitigation, remediation, or risk acceptance with IT leadership, County departments, and other stakeholders.
  • Direct and coordinate the County's response to cybersecurity incidents, including investigation, containment, recovery, documentation, notification, and coordination with executive leadership, law enforcement, government partners, insurers, and other external organizations as appropriate.
  • Provide leadership and oversight for compliance with applicable cybersecurity, privacy, and information-protection requirements, including CJIS, HIPAA, and other federal, state, and local requirements.
  • Develop, implement, and maintain a Countywide cybersecurity, privacy, and HIPAA security awareness and training program, including phishing preparedness and role-based security education.
  • Establish security requirements and provide cybersecurity review and guidance for new systems, applications, cloud services, infrastructure, integrations, and emerging technologies, including artificial intelligence.
  • Oversee third-party cybersecurity risk, including security assessments of vendors, contractors, hosted services, and technology providers and the development and review of appropriate contractual security requirements.
  • Develop and maintain cybersecurity incident response plans and provide security oversight and coordination for IT disaster recovery, business continuity, and cyber-resilience planning.
  • Monitor the County's cybersecurity posture through security monitoring, vulnerability assessments, audits, penetration testing, threat intelligence, and other appropriate security assessments.
  • Establish cybersecurity metrics and reporting and regularly advise the CIO, Deputy CIO, and other County leadership regarding cybersecurity posture, significant risks, threats, incidents, compliance, and remediation efforts.
  • Coordinate cybersecurity initiatives and information sharing with federal, state, and local government partners and other appropriate cybersecurity and law-enforcement organizations.
  • Evaluate emerging cybersecurity threats, technologies, industry practices, and regulatory changes and recommend appropriate changes to County security strategy, architecture, policies, and controls.
  • Provide leadership, direction, mentoring, and technical guidance to cybersecurity personnel and other IT staff and promote security awareness and accountability throughout the organization.
  • Develop and administer cybersecurity-related budgets, contracts, services, and technology investments consistent with organizational priorities and available resources.
  • Manage and direct cybersecurity contractors, consultants, service providers, and vendors and monitor their performance and compliance with County requirements.
  • Participate in strategic planning and collaborate with IT leadership to ensure cybersecurity requirements are appropriately incorporated into County technology strategy, projects, and operations.
  • Perform other duties as assigned and provide leadership during cybersecurity incidents, technology emergencies, and other events requiring an IT security response.

OTHER SPECIFIC TASKS OR DUTIES
  • Perform other duties, tasks and special projects as required.

MINIMUM QUALIFICATIONS
  • Completion of a Bachelor's Degree in Computer Science, or related field, and a minimum of seven (7) years experience in the Information Technology field or;
  • Associate's Degree in Computer Science, or related field, and a minimum of nine (9) years experience in Information Technology field or;
  • Any equivalent combination of relevant education, experience, and training is acceptable.
  • At least one (1) year of management/leadership experience that included strategic planning, resource allocation, production methods, and coordination of people and resources, or; Any equivalent combination of education and experience.

KNOWLEDGE, SKILLS AND ABILITIES
  • Comprehensive knowledge of information security principles, frameworks, controls, and risk management practices, including the NIST Cybersecurity Framework (CSF) and other recognized government and industry cybersecurity standards.
  • Knowledge of applicable cybersecurity, privacy, and regulatory requirements and standards, including NIST guidance, CJIS Security Policy, HIPAA, and other federal, state, and local government requirements.
  • Knowledge of security architecture, identity and access management, network security, endpoint security, vulnerability management, incident response, and data protection.
  • Knowledge of business continuity, disaster recovery, and cyber incident preparedness and response.
  • Knowledge of current and emerging technologies, cybersecurity threats, vulnerabilities, and attack techniques.
  • Strong analytical, risk-assessment, problem-solving, and decision-making skills.
  • Ability to develop and maintain information security policies, standards, procedures, and security awareness programs.
  • Ability to appropriately manage highly confidential, sensitive, and security-related information.
  • Ability to communicate complex cybersecurity risks and recommendations effectively to technical staff, executive leadership, elected officials, department leadership, and other non-technical stakeholders.
  • Ability to lead, mentor, and provide technical and strategic direction to staff.
  • Ability to coordinate cybersecurity activities across County departments and with vendors, contractors, law enforcement, and external partners.
  • Ability to independently prioritize competing security risks and operational requirements while supporting County business needs.
  • Strong written and verbal communication, organizational, leadership, and interpersonal skills.

REQUIRED LICENSES/CERTIFICATIONS/CLEARANCES
  • Valid driver's license and acceptable driving record in accordance with County policy
  • Acceptable pre-employment criminal background check.
  • CISM (or equivalent - Preferred after 1 year of employment)

PHYSICAL REQUIREMENTS/WORK ENVIRONMENT
  • Work is primarily sedentary in nature.
  • No special demands are required.

The County of Lancaster offers comprehensive benefits to our employees. Read more about our benefits here.
Lancaster County Government provides Equal Employment Opportunity for all persons regardless of race, religion, age, sex, national origin, genetic information or disability. The County also observes all applicable laws regarding Veterans status. The County reflects this action in all areas of employment and compensation practices and policies. Employment with the County is based upon the ability to perform the job as well as dependability and reliability once an individual is hired.

Apply