ZipRecruiter

Log In

2

Entry Level Cybersecurity Governance Jobs (NOW HIRING)

next page

Showing results 1-20

All JobsEntry Level Cybersecurity Governance Jobs

Entry Level Cybersecurity Governance information

See salary details

$43K

$99.4K

$150K

How much do entry level cybersecurity governance jobs pay per year?

As of Jun 29, 2026, the average yearly pay for entry level cybersecurity governance in the United States is $99,400.00, according to ZipRecruiter salary data. Most workers in this role earn between $79,500.00 and $115,500.00 per year, depending on experience, location, and employer.

Are there any entry-level cyber security jobs?

Yes, entry-level cybersecurity governance roles are available and often focus on developing policies, risk management, and compliance. These positions typically require foundational knowledge of cybersecurity principles, some familiarity with security frameworks, and may offer certifications like CompTIA Security+ to enhance prospects.

What is the difference between Entry Level Cybersecurity Governance vs Entry Level Cybersecurity Compliance?

AspectEntry Level Cybersecurity GovernanceEntry Level Cybersecurity Compliance
CertificationsCompTIA Security+, CISSP (entry-level), CISA (entry-level)CompTIA Security+, CISA, CISSP (entry-level)
Work EnvironmentDevelops policies, risk management, strategic planningEnsures adherence to policies, audits, regulatory requirements
Employer & Industry UsageOrganizations establishing cybersecurity frameworksOrganizations maintaining regulatory compliance
Search & Comparison IntentUnderstanding governance roles in cybersecurityUnderstanding compliance and audit roles

Entry Level Cybersecurity Governance focuses on creating policies, managing risks, and establishing cybersecurity frameworks. In contrast, Entry Level Cybersecurity Compliance emphasizes ensuring adherence to regulations, conducting audits, and maintaining compliance standards. Both roles are essential in a cybersecurity team but differ in their primary focus and responsibilities.

What are the key skills and qualifications needed to thrive as an Entry Level Cybersecurity Governance professional, and why are they important?

To thrive in Entry Level Cybersecurity Governance, you need a basic understanding of information security principles, risk management, and compliance frameworks, often supported by a relevant degree or certifications such as CompTIA Security+ or ISO/IEC 27001 Foundations. Familiarity with governance, risk, and compliance (GRC) tools, security policies, and regulatory standards like GDPR or NIST is typically required. Strong analytical thinking, attention to detail, and effective communication are important soft skills for managing documentation and collaborating with cross-functional teams. These skills ensure that organizations maintain robust security postures and comply with legal and regulatory requirements.

What is the 80 20 rule in cyber security?

In cybersecurity, the 80/20 rule suggests that approximately 80% of security issues are caused by 20% of vulnerabilities or threats. Entry level cybersecurity governance roles often focus on identifying and mitigating the most critical risks first, using tools like risk assessments and security frameworks to prioritize efforts.

What are some common challenges faced by entry-level professionals in cybersecurity governance, and how can they overcome them?

Entry-level professionals in cybersecurity governance often face challenges such as understanding complex regulatory requirements, staying updated with evolving compliance standards, and effectively communicating risks to non-technical stakeholders. To overcome these challenges, it is helpful to proactively seek mentorship, participate in regular training, and engage with cross-functional teams to better understand business processes. Building strong documentation and organizational skills will also help you manage policies and audits more efficiently, setting a solid foundation for career growth.

Is it possible to get into cybersecurity with no experience?

Entry level cybersecurity governance roles often do not require prior experience, as employers may prioritize foundational knowledge, certifications like CompTIA Security+ or CISSP, and a willingness to learn. Gaining skills in areas such as risk management, compliance, and security policies can help entry-level candidates enter the field without extensive experience.

Can I make $200,000 a year in cyber security?

Entry level cybersecurity governance roles typically do not pay $200,000 annually; such high salaries are usually associated with senior positions, specialized skills, certifications like CISSP, or management roles. Starting salaries for entry-level positions generally range from $50,000 to $80,000, with significant increases possible with experience and advanced credentials.

What is entry level cybersecurity governance?

Entry level cybersecurity governance refers to roles focused on helping organizations develop, implement, and maintain policies, procedures, and standards that protect digital information and systems. These positions typically involve supporting compliance efforts, conducting risk assessments, and ensuring that security controls align with legal and regulatory requirements. Entry level professionals often assist in organizing security awareness programs, monitoring policy adherence, and preparing documentation for audits. This role is a great starting point for those interested in the broader field of cybersecurity management and compliance.
More about Entry Level Cybersecurity Governance jobs
What cities are hiring for Entry Level Cybersecurity Governance jobs? Cities with the most Entry Level Cybersecurity Governance job openings:
What are the most commonly searched types of Cybersecurity Governance jobs? The most popular types of Cybersecurity Governance jobs are:
What states have the most Entry Level Cybersecurity Governance jobs? States with the most job openings for Entry Level Cybersecurity Governance jobs include:
What job categories do people searching Entry Level Cybersecurity Governance jobs look for? The top searched job categories for Entry Level Cybersecurity Governance jobs are:
Entry Level Cybersecurity Governance jobs near you
Infographic showing various Entry Level Cybersecurity Governance job openings in the United States as of June 2026, with employment types broken down into 97% Full Time, and 3% Contract. Highlights an 82% Physical, 7% Hybrid, and 11% Remote job distribution, with an average salary of $99,400 per year, or $47.8 per hour.
Cybersecurity Policy Analyst & Governance Specialist

Cybersecurity Policy Analyst & Governance Specialist

Odesus

Los Angeles, CA

$50/hr

Full-time

Posted 16 days ago

Key responsibilities

  • Lead the comprehensive update of the Information Security Policy and all associated standards, guidelines, and procedures.

  • Conduct formal policy gap analysis and proactively schedule and lead stakeholder interviews to identify operational hurdles.

  • Draft new policies, technical standards, and guidelines, and manage the approval workflow to ensure timely project advancement.

Job description

Job Location - Downtown Los Angeles, CA

Type - Contract (6 Months)

Pay Rate - $50.00 Per Hour (W2 Only)

Scope of Work

The Information Technology Agency, Information Security Office (ITA-ISO) Governance Section requires a Professional Consultant to lead the comprehensive update of the Information Security Policy, originally updated in March 2024, and all associated standards, guidelines, and procedures.

The project involves a full lifecycle policy review: from conducting a gap analysis against modern frameworks (e.g., NIST CSF 2.0, ISO 27001) to drafting specialized standards for emerging technologies (AI, Zero Trust, Cloud Sovereignty). The Consultant is responsible for the momentum of the project, including scheduling stakeholder interviews and driving the approval workflow. The consultant must be an experienced policy professional who serves as an active integrated member of the Governance section team. The consultant is responsible for the proactive momentum of the project and is expected to maintain a high level of initiative. Waiting for supervisor or stakeholder feedback is not considered "idle time"; the Consultant is expected to utilize such periods to develop supporting guidelines, training materials, technical standards, or offer assistance to the "We Secure LA" team on policy-related security initiatives.

Duties and Responsibilities:

The Consultant will provide expertise and proactive project management for the following:

  • Policy Gap Analysis: Conduct a formal review of the March 2024 ISP against current regulatory requirements (CCPA/CPRA updates) and industry best practices.
  • Stakeholder Engagement & Discovery: Proactively schedule and lead "Policy Discovery" sessions with departments to identify operational hurdles in current security mandates.
  • Drafting & Alignment: Author high-level policies, granular technical standards (e.g., Password/MFA standards), and non-technical guidelines. Ensure all documents are cross-referenced and consistent.
  • Emerging Tech Governance: Develop specific "Acceptable Use" standards for Artificial Intelligence (AI), automated tools, and remote work infrastructure.
  • Approval Pipeline Management: Navigate the administrative approval process, incorporating feedback from the City Attorney, Labor Relations, and ITA Leadership without project stagnation.
  • Continuous Support: In periods of administrative delay, the Consultant shall assist the security team with policy-related research, internal audits, or creating "Policy-to-Practice" training decks.
  • Proactive "Downtime" Management: In the event of administrative delays or pending approvals, the Consultant is contractually expected to pivot to high-value support tasks, including authoring training decks, assisting with internal security audits, or drafting technical "How-To" guides for the team.

Deliverables: The Consultant is expected to contribute to the following within the contract period:

  1. Policy Gap Analysis Report: A formal assessment of current policy deficiencies compared to NIST CSF 2.0.
  2. Modernized Citywide Information Security Policy: A finalized, ready-for-adoption Information Security Policy.
  3. Policy Interpretation Guide: A simplified "FAQ" or handbook for Departmental ISOs to help them implement the new policies.
  4. Governance Desk Manual: A guide for ITA staff on how to maintain, review, and update these policies in the future.
  5. Monthly Progress & Engagement Logs: Documentation of all stakeholder interviews and follow-ups conducted to prove active project advancement.

Qualifications:

  • Bachelor's degree in cybersecurity, information technology, computer science, or related field; students within six months of graduation may apply. Equivalent combination of education and relevant experience will be considered.
  • Bachelor's degree in a related field; professional certifications such as CISM or CISA are highly preferred. Also entry-level cybersecurity certifications are valued, such as:

○ ISC² Certified in Cybersecurity (CC)

â—‹ CompTIA Security+

â—‹ CompTIA Cybersecurity Analyst+ (CySA+)

  • Minimum 5 years of direct experience in Cybersecurity Policy Development and Authoring. (Incumbent must be able to contribute immediately with zero training).
  • Deep, practical knowledge of NIST 800-53, NIST CSF, and ISO/IEC 27001 is preferred.
  • Advanced Communication
Odesus logo

About Odesus

Sourced by ZipRecruiter

Industry

Recruiting and staffing services

Company size

51 - 200 Employees

Headquarters location

Los Angeles, CA, US

Year founded

2001

View All Odesus Jobs