ZipRecruiter

Log In

1

Director Of Information Security Jobs (NOW HIRING)

Marylandconnect

JR101916 Director of Information Security (Open) Department: Information Technology, PM Position Type: Regular Open Date: 06-30-2026 Close Date: $140,000 - $150,000 The Director of Information ...

Enpro

Director, IT Security

Charlotte, NC · On-site

Enpro is currently seeking a Director of Information Security to join our Information Security Team based in Charlotte, NC. The ideal candidate will possess extensive technical experience building ...

Smarkets

Head of Information Security

Chicago, IL · On-site

$130 - $200/hr

Senior security leader with 7+ years of senior-level information security experience, ideally ... Direct experience with security and risk assessments, incident response planning and execution ...

Sendbird

Head of Information Security

San Mateo, CA

Why Head of IT & Security We're an AI company handling enterprise-grade conversations at global scale, and our customers trust us with data that matters. That trust isn't a nice-to-have. It's a ...

next page

Showing results 1-20

All JobsOf Information Security JobsDirector Of Information Security Jobs

Director Of Information Security information

See salary details

$89.5K

$139.6K

$202K

How much do director of information security jobs pay per year?

As of Aug 9, 2026, the average yearly pay for director of information security in the United States is $139,587.00, according to ZipRecruiter salary data. Most workers in this role earn between $125,000.00 and $149,500.00 per year, depending on experience, location, and employer.

What does a director of information security do?

A Director of Information Security is responsible for overseeing an organization's information security strategy, policies, and programs. They lead efforts to protect sensitive data, prevent security breaches, and ensure compliance with industry regulations. This role involves managing security teams, assessing risks, implementing security technologies, and responding to incidents. Directors of Information Security also collaborate with other departments to promote a culture of security awareness throughout the organization.

What is the difference between Director Of Information Security vs Security Manager?

AspectDirector Of Information SecuritySecurity Manager
CertificationsCISSP, CISM, CISACISSP, Security+
Work EnvironmentStrategic, executive-level, policy developmentOperational, team management, security implementation
Employer & Industry UsageLarge corporations, government agenciesMid-sized companies, IT departments
Search & Comparison IntentUnderstanding leadership roles in securityManaging security teams and daily operations

The Director Of Information Security focuses on strategic planning, policy development, and overseeing security programs at an organizational level. In contrast, a Security Manager handles daily security operations, manages teams, and implements security measures. Both roles require relevant certifications like CISSP but differ in scope and responsibilities.

What are the key skills and qualifications needed to thrive as a director of information security?

To thrive as a Director Of Information Security, you need extensive knowledge of cybersecurity principles, risk management frameworks, and a strong background in IT, often supported by a bachelor's or master's degree in a related field and relevant certifications like CISSP or CISM. Familiarity with security information and event management (SIEM) tools, vulnerability assessment platforms, and compliance systems is essential. Leadership, strategic thinking, and effective communication are critical soft skills for managing teams and influencing organizational security culture. These skills and qualities are vital to protect organizational assets, ensure regulatory compliance, and proactively mitigate evolving cyber threats.

What are some common challenges faced by a director of information security, and how can they effectively address them?

Directors of Information Security often face the challenge of balancing organizational security needs with business objectives, managing evolving cyber threats, and ensuring compliance with regulatory requirements. They must work cross-functionally with IT, legal, and executive teams to develop security policies and promote a culture of security awareness. To address these challenges, it's important to stay updated on threat trends, invest in staff training, and regularly assess and update security protocols. Building strong communication channels and fostering collaboration across departments are also essential for effective risk management.
What cities are hiring for Director Of Information Security jobs? Cities with the most Director Of Information Security job openings:
What are the most commonly searched types of Of Information Security jobs? The most popular types of Of Information Security jobs are:
What states have the most Director Of Information Security jobs? States with the most job openings for Director Of Information Security jobs include:
Infographic showing various Director Of Information Security job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 74% Full Time, 22% Part Time, and 3% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $139,587 per year, or $67.1 per hour.

Director of Information Security

AeroVironment

Herndon, VA • On-site

Full-time

Medical, Dental, Vision, Retirement

Posted 19 days ago

AeroVironment rating

9.1

Company rating: 9.1 out of 10

Based on 7 frontline employees who took The Breakroom Quiz

7th of 72 rated aerospace companies

Job description

Worker Type

Regular


Job Description

Company Overview
AV is a leading defense technology company delivering mission-critical solutions to government and commercial customers. We are seeking an experienced Director of Information Security to lead our cybersecurity program and ensure the protection of sensitive national security information.
Summary
The Director of Information Security will lead the organization's information security program, ensuring compliance with defense industry regulations, managing information security, and supervising a team of ~5 professionals. This role requires deep expertise in defense contractor security requirements and the ability to balance rigorous security controls with operational efficiency.
Position Responsibilities
Leadership & Management
  • Lead and mentor a team of information security professionals including compliance specialists, compliance managers, and/or analysts
  • Develop and execute the information security strategy aligned with business objectives and threat landscape
  • Collaborate with executive leadership on security risk management, investment priorities, and incident response
  • Lead and write procedures on approving security exceptions,foreign travel,and deviations following established risk management frameworks
Compliance & Risk Management
  • Build compliance approaches for NIST SP 800-171, CMMC, DFARS, ITAR, EAR, and other defense industry information security requirements
  • Develop and maintain security policies, procedures, and standards
  • Conduct information security risk assessments and manage risk treatment plans
  • Oversee security audits, assessments, and government inspections
  • Maintain relationships with government and third party representatives
Program Management
  • Review and advise on continuous monitoring, compliance practices, and security automation priorities
  • Develop security metrics and reporting for leadership and government customers
  • Manage security budget and resource allocation
Business Partnership
  • Serve as trusted advisor to business units on security requirements
  • Facilitate security discussions with customers and partners
  • Balance security requirements with mission effectiveness and operational efficiency
  • Promote security awareness culture throughout the organization

Basic Qualifications (Required Skills & Experience)

Education
  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field
  • Master's degree preferred
Experience
  • Minimum 10 years of progressive information security experience
  • Minimum 5 years in leadership role managing security teams
  • Minimum 5 years working in defense contractor or government environment
  • Experience managing security programs supporting classified systems and information
  • Demonstrated experience implementing and maintaining NIST 800-171 and CMMC compliance
Technical Knowledge
  • Expert knowledge of NIST SP 800-171, CMMC 2.0, and DFARS cybersecurity requirements
  • Working knowledge of NIST Cybersecurity Framework, ISO 27001/27002, and CIS Controls
  • Understanding of cloud security principles and FedRAMP requirements
  • Familiarity with network security, endpoint protection, SIEM, and security operations technologies
  • Knowledge of export control regulations (ITAR/EAR) and related IT security implications
Compliance Frameworks
  • NIST SP 800-171 (Protecting CUI in Nonfederal Systems)
  • CMMC (Cybersecurity Maturity Model Certification) 2.0
  • DFARS 252.204-7012, 7019, 7020, 7021, and related clauses
Skills
  • Strong leadership and people management capabilities
  • Excellent written and verbal communication skills, including ability to present to executive audiences
  • Risk management and decision-making under uncertainty
  • Project and program management
  • Budget management and financial planning
  • Vendor management and contract oversight
  • Ability to translate complex technical security concepts for non-technical stakeholders

Other Qualifications & Desired Competencies

Certifications (Preferred)
  • CISSP (Certified Information Systems Security Professional)
  • CISA (Certified Information Systems Auditor)
  • CCP (CMMC Certified Professional)
  • CCA (CMMC Certified Assessor)
  • CAP (Certified Authorization Professional)
  • Security+ or equivalent DoD 8570 IAT Level II certification
Additional Experience
  • Experience in aerospace, intelligence, or weapons systems environment
  • FedRAMP (Federal Risk and Authorization Management Program)
  • FIPS 140-2/140-3 cryptographic module validation
  • DoD Cloud Computing SRG
  • NIST SP 800-37 (RMF Application) and SP 800-53
  • ISO 27001 certification experience
  • Security architecture design
  • Software security and secure development lifecycle
  • Supply chain risk management
  • Export control and OPSEC experience
  • Government liaison and relationship management
  • Change management and organizational transformation

Physical Demands

  • Ability to work in an office environment (Constant)
  • Required to sit and stand for long periods; talk, hear, and use hands and fingers to operate a computer and telephone keyboard (Frequent)

Special Requirements

  • U.S. Citizen, U.S. Permanent Resident (Green Card holder) orasylee/refugee status as defined by 8 U.S.C. 1324b(a)(3) required.


Clearance Level

No Clearance

The salary range for this role is:

$170,500 - $272,750

AeroVironment considers several factors when extending an offer, including but not limited to, the location, the role and associated responsibilities, a candidate's work experience, education/training, and key skills.

ITAR Requirement:

This position requires access to information that is subject to compliance with the International Traffic Arms Regulations ("ITAR") and/or the Export Administration Regulations ("EAR"). In order to comply with the requirements of the ITAR and/or the EAR, applicants must qualify as a U.S. person under the ITAR and the EAR, or a person to be approved for an export license by the governing agency whose technology comes under its jurisdiction. Please understand that any job offer that requires approval of an export license will be conditional on AeroVironment's determination that it will be able to obtain an export license in a time frame consistent with AeroVironment's business requirements. A "U.S. person" according to the ITAR definition is a U.S. citizen, U.S. lawful permanent resident (green card holder), or protected individual such as a refugee or asylee. See 22 CFR 120.15. Some positions will require current U.S. Citizenship due to contract requirements.

Benefits: AV offers an excellent benefits package including medical, dental vision, 401K with company matching, a 9/80 work schedule and a paid holiday shutdown. For more information about our company benefit offerings please visit: http://www.avinc.com/myavbenefits.

We also encourage you to review our company website at http://www.avinc.com to learn more about us.

Principals only need apply. NO agencies please.

About AV:

AV isn't for everyone. We hire the curious, the relentless, the mission-obsessed. The best of the best.

We don't just build defense technology-we redefine what's possible. As the premier autonomous systems company in the U.S., AV delivers breakthrough capabilities across air, land, sea, space, and cyber. From AI-powered drones and loitering munitions to integrated autonomy and space resilience, our technologies shape the future of warfare and protect those who serve.

Founded by legendary innovator Dr. Paul MacCready, AV has spent over 50 years pushing the boundaries of what unmanned systems can do. Our heritage includes seven platforms in the Smithsonian-but we're not building history, we're building what's next.

If you're ready to build technology that matters-with speed, scale, and purpose-there's no better place to do it than AV.

We are proud to be an EEO/AA Equal Opportunity Employer, including disability/veterans. AeroVironment, Inc. is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Qualified applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, protected veteran status, genetic data,sexual orientation, gender identity or other legally protected status.

ITAR

U.S. Citizenship required

What AeroVironment employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply