1

Cybersecurity Governance Jobs (NOW HIRING)

Manager, Cyber Security

Reston, VA ยท Remote

$115K - $156K/yr

Lead cybersecurity governance and RMF coordination across a complex federal technology services environment. * Develop, maintain, and coordinate cybersecurity assessment documentation, including FIPS ...

Manager, Cyber Security

Reston, VA ยท On-site

$115K - $156K/yr

Lead cybersecurity governance and RMF coordination across a complex federal technology services environment. * Develop, maintain, and coordinate cybersecurity assessment documentation, including FIPS ...

Deputy Cybersecurity Governance Lead

Washington, DC ยท Hybrid

$131K/yr

The Deputy Cybersecurity Governance Lead provides deep technical and operational oversight for teams responsible for system security, assessment and authorization, continuous monitoring, and risk ...

$106K - $142K/yr

Job Summary The Vice President - Cybersecurity Governance, Risk & Compliance is a senior executive responsible for establishing, leading, and evolving the enterprise-wide cybersecurity governance ...

Deputy Cybersecurity Governance Lead

Washington, DC ยท Hybrid

$131K/yr

The Deputy Cybersecurity Governance Lead provides deep technical and operational oversight for teams responsible for system security, assessment and authorization, continuous monitoring, and risk ...

Deputy Cybersecurity Governance Lead

Washington, DC ยท Hybrid

$131K/yr

The Deputy Cybersecurity Governance Lead provides deep technical and operational oversight for teams responsible for system security, assessment and authorization, continuous monitoring, and risk ...

next page

Showing results 1-20

Cybersecurity Governance information

See salary details

$57K

$133K

$186K

How much do cybersecurity governance jobs pay per year?

As of Jun 11, 2026, the average yearly pay for cybersecurity governance in the United States is $132,962.00, according to ZipRecruiter salary data. Most workers in this role earn between $111,000.00 and $150,000.00 per year, depending on experience, location, and employer.

Is SOC an entry-level job?

A Security Operations Center (SOC) analyst role is typically not entry-level and often requires some experience in cybersecurity, network monitoring, or related fields. Entry-level positions in cybersecurity may include roles like SOC analyst trainees or junior analysts, but more advanced SOC positions usually demand certifications such as CompTIA Security+ or Certified SOC Analyst (CSA) and familiarity with security tools like SIEM systems.

What is the role of governance in cybersecurity?

In cybersecurity governance, the role involves establishing policies, standards, and procedures to manage and mitigate security risks across an organization. It ensures compliance with legal and regulatory requirements and aligns security strategies with business objectives, often supported by frameworks like ISO 27001 or NIST. Effective governance provides oversight, accountability, and continuous improvement of cybersecurity practices.

What are the main responsibilities of a Cybersecurity Governance professional on a day-to-day basis?

Cybersecurity Governance professionals typically oversee the creation, implementation, and enforcement of security policies and procedures to maintain compliance with relevant laws and industry standards. On a daily basis, you may analyze potential risks, monitor regulatory changes, conduct internal audits, and provide guidance to business units on security best practices. Collaboration with IT, legal, and executive teams is common to ensure a unified security posture across the organization. This role often involves balancing technical requirements with business objectives, making it both challenging and impactful for the company's overall risk management strategy.

What does a cybersecurity governance specialist do?

A cybersecurity governance specialist develops and implements policies, standards, and procedures to ensure an organization's cybersecurity aligns with legal and regulatory requirements. They oversee risk management, compliance, and security frameworks, often using tools like audits and assessments to monitor effectiveness and improve security posture.

What is a Cybersecurity Governance job?

A Cybersecurity Governance job focuses on establishing and enforcing security policies, frameworks, and compliance requirements within an organization. Professionals in this role ensure alignment with regulatory standards, industry best practices, and business objectives to mitigate security risks. They collaborate with stakeholders to define security strategies, assess risks, and monitor compliance efforts. This role often involves creating security guidelines, conducting audits, and driving awareness programs to enhance the organization's security posture.

What are the key skills and qualifications needed to thrive in the Cybersecurity Governance position, and why are they important?

Cybersecurity Governance professionals require a solid understanding of information security frameworks, risk management principles, compliance requirements, and policy development, often supported by a degree in cybersecurity or related fields. Certifications like CISSP, CISM, or COBIT and familiarity with governance, risk, and compliance (GRC) platforms are highly valued. Strong analytical thinking, attention to detail, and effective communication skills enable these professionals to navigate complex regulations and collaborate across departments. These competencies are crucial for ensuring organizational security practices align with legal and industry standards while adapting to evolving cyber threats.

Can you make $500,000 a year in cyber security?

Cybersecurity professionals in senior roles such as Chief Information Security Officers or cybersecurity directors can earn $500,000 or more annually, especially with extensive experience, advanced certifications, and leadership responsibilities. Entry-level or mid-level cybersecurity roles typically have lower salaries, but high-level positions in large organizations or specialized fields can reach or exceed this income level.
More about Cybersecurity Governance jobs
What cities are hiring for Cybersecurity Governance jobs? Cities with the most Cybersecurity Governance job openings:
What are the most commonly searched types of Cybersecurity Governance jobs? The most popular types of Cybersecurity Governance jobs are:
What states have the most Cybersecurity Governance jobs? States with the most job openings for Cybersecurity Governance jobs include:
Infographic showing various Cybersecurity Governance job openings in the United States as of June 2026, with employment types broken down into 54% Full Time, 8% Part Time, and 38% Contract. Highlights an 77% In-person, and 23% Remote job distribution, with an average salary of $132,962 per year, or $63.9 per hour.
Cybersecurity Policy Writer & Governance Lead

Cybersecurity Policy Writer & Governance Lead

HP Development Company, L.P.

Spring, TX โ€ข On-site

$105K - $161K/yr

Full-time

Medical, Dental, Vision, Life, PTO

This job post hasย expired 1 day ago.ย Applications are no longer accepted.


Job description

Cybersecurity Policy Writer & Governance Lead
Description -
Job Summary
We are seeking a strategic and detail-driven Cybersecurity Policy Writer & Governance Lead to design, implement, and continuously enhance cybersecurity policies and governance frameworks. This role is critical in strengthening HP's security posture, ensuring regulatory compliance, and embedding risk-aware practices across the company.
The ideal candidate combines deep expertise in cybersecurity standards and regulatory requirements with the ability to translate complex technical concepts into clear, actionable, business-aligned policies. This role requires strong cross-functional collaboration, executive communication skills, and a proactive approach to risk management.
Key Responsibilities
Policy Development & Governance
  • Lead the development, review, and lifecycle management of cybersecurity policies, standards, and specifications.
  • Establish and mature governance frameworks aligned with industry-best practices and regulatory expectations.
  • Ensure policies evolve in response to emerging threats, business changes, and regulatory updates.

Regulatory Compliance & Risk Alignment
  • Maintain strong knowledge of regulatory and industry frameworks such as NIST Cybersecurity Framework, ISO/IEC 27001, CIS V8.1, General Data Protection Regulation, and PCI DSS.
  • Ensure alignment between cybersecurity controls, enterprise risk management practices, and compliance obligations.
  • Provide authoritative guidance on policy interpretation, control implementation, and exception management.

Stakeholder Engagement
  • Partner with IT, Legal, Compliance, Risk, Audit, and business units to ensure policies are practical, enforceable, and business-aligned.
  • Influence senior leadership through reporting on governance metrics, compliance posture, and risk exposure.

Training & Awareness
  • Support the development and delivery of cybersecurity awareness and policy training programs.
  • Promote a culture of security accountability and governance maturity across the organization.

Monitoring & Reporting
  • Define and track governance KPIs and KRIs.
  • Monitor policy adherence and control effectiveness.
  • Provide executive-level reporting on compliance trends, risk insights, and remediation progress.

Qualifications
  • Bachelor's or Graduate degree in Computer Science, Information Technology, Cybersecurity, or related discipline (or equivalent experience).
  • 7-10 years of progressive experience in cybersecurity governance, policy development, risk management, or compliance.
  • Demonstrated experience drafting enterprise-level cybersecurity policies and standards.
  • Strong knowledge of global regulatory and cybersecurity control frameworks.
  • Exceptional written and verbal communication skills, with the ability to translate technical requirements into business-focused guidance.
  • Experience with policy lifecycle management tools or governance platforms preferred.
  • Professional certifications such as CISSP, CISM, CRISC, or ISO 27001/NIST-related certifications are highly desirable.
  • Working understanding of Artificial Intelligence is a plus.

Technical & Governance Expertise
  • Cybersecurity Governance & Operating Models
  • Policy & Standards Development
  • Regulatory Compliance & Audit Readiness
  • Security Controls & Control Mapping
  • Automation & Governance Tooling

Leadership & Enterprise Skills
  • Executive Communication
  • Cross-Functional Influence
  • Results Orientation
  • Learning Agility
  • Customer-Centric Mindset

Impact & Scope
  • Influences cybersecurity governance strategies across multiple teams and business units.
  • May lead projects or initiatives related to governance transformation and compliance readiness.
  • Drives enterprise-wide consistency in policy adoption and control maturity.

Complexity
  • Operates within established frameworks while addressing complex regulatory and cybersecurity challenges.
  • Exercises independent judgment in interpreting standards and resolving governance issues.
  • Balances risk, compliance, and operational practicality in decision-making.

The pay range for this role is $105,050 to $161,800 USD annually with additional opportunities for pay in the form of bonus and/or equity (applies to United States of America candidates only). Pay varies by work location, job-related knowledge, skills, and experience.
Benefits:
HP offers a comprehensive benefits package for this position, including:
  • Health insurance
  • Dental insurance
  • Vision insurance
  • Long term/short term disability insurance
  • Employee assistance program
  • Flexible spending account
  • Life insurance
  • Generous time off policies, including;
  • 4-12 weeks fully paid parental leave based on tenure
  • 11 paid holidays
  • Additional flexible paid vacation and sick leave (US benefits overview)

The compensation and benefits information is accurate as of the date of this posting. The Company reserves the right to modify this information at any time, with or without notice, subject to applicable law.
Disclaimer
โ€ข This job description describes the general nature and level of work performed in this role. It is not intended to be an exhaustive list of all duties, skills, responsibilities, knowledge, etc. These may be subject to change and additional functions may be assigned as needed by management.
Job -
Data & Information Technology
Schedule -
Full time
Shift -
No shift premium (United States of America)
Travel -
No
Relocation -
No
Equal Opportunity Employer (EEO) -
HP, Inc. provides equal employment opportunity to all employees and prospective employees, without regard to race, color, religion, sex, national origin, ancestry, citizenship, sexual orientation, age, disability, or status as a protected veteran, marital status, familial status, physical or mental disability, medical condition, pregnancy, genetic predisposition or carrier status, uniformed service status, political affiliation or any other characteristic protected by applicable national, federal, state, and local law(s).
Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence.
For more information, review HP's EEO Policy or read about your rights as an applicant under the law here: "Know Your Rights: Workplace Discrimination is Illegal"