ZipRecruiter

Log In

1

Information Security Officer Jobs in Reston, VA (NOW HIRING)

CityFirst Bank

Information Security Officer

Washington, DC · On-site

$135K - $140K/yr

ROLE SUMMARY The Information Security Officer is responsible for monitoring, analyzing, and maintaining the bank's technical security controls in support of City First Bank's Information Security ...

next page

Showing results 1-20

All JobsInformation Security Officer JobsInformation Security Officer Jobs in Reston, VA

Information Security Officer information

See Reston, VA salary details

$30.7K

$98.9K

$177.7K

How much do information security officer jobs pay per year?

As of Aug 1, 2026, the average yearly pay for information security officer in Reston, VA is $98,938.00, according to ZipRecruiter salary data. Most workers in this role earn between $51,600.00 and $132,900.00 per year, depending on experience, location, and employer.

What is the difference between Information Security Officer vs Security Analyst?

AspectInformation Security OfficerSecurity Analyst
CertificationsCISSP, CISM, CompTIA Security+CompTIA Security+, GIAC Security Essentials
Work EnvironmentOversees security policies, manages security teams, strategic planningMonitors security systems, analyzes threats, incident response
Employer & Industry UsageUsed across industries for security leadership rolesCommon in IT departments for threat detection and analysis

The main difference is that an Information Security Officer focuses on strategic security management and policy development, while a Security Analyst primarily monitors and analyzes security threats. Both roles require similar certifications and are vital in protecting organizational assets, but they differ in scope and responsibilities.

What are Information Security Officers?

Information Security Officers are professionals responsible for protecting an organization's information systems and data from unauthorized access, breaches, and other security threats. They develop, implement, and manage security policies, procedures, and protocols to ensure the confidentiality, integrity, and availability of information. Information Security Officers also conduct risk assessments, oversee compliance with regulations, and respond to security incidents to minimize potential damage. Their role is critical in safeguarding sensitive information and maintaining the trust of clients, employees, and stakeholders.

What are the key skills and qualifications needed to thrive as an Information Security Officer, and why are they important?

To thrive as an Information Security Officer, you need strong expertise in risk management, cybersecurity frameworks, incident response, and typically a bachelor’s degree in information security or a related field. Familiarity with tools like SIEM systems, vulnerability scanners, and certifications such as CISSP or CISM are highly valued. Exceptional analytical thinking, attention to detail, and effective communication skills help you stand out in this role. These competencies are crucial for protecting organizational data, ensuring compliance, and responding swiftly to evolving cyber threats.

Is 40 too old for cyber security?

An Information Security Officer role can be suitable for individuals of any age, as experience and skills are often more important than age. Many professionals transition into cybersecurity later in their careers, especially if they have relevant technical knowledge, certifications, or prior experience in IT or related fields.

What Is an Information Security Officer?

An information security officer is an information technology (IT) analyst who leads a team to monitor and improve an organization’s information security. You are responsible for computer systems security, and your duties include designing and running security tests, hiring and training new team members, and making reports on your findings to other departments in the company. A career as an information security analyst requires you have some formal qualifications and experience, generally a bachelor’s degree in IT, computer science, or a related field, as well as several years of experience as a part of an IT security team. Continuing education opportunities can keep you abreast of the latest technologies, vulnerabilities, and threats, and will help set you ahead of other candidates in your job search. Useful job skills include analytical problem-solving, security risk evaluation, and knowledge of best practices for secure systems.

What does an information security officer do?

An information security officer is responsible for protecting an organization's computer systems and data from cyber threats. They develop security policies, implement security measures, monitor networks for vulnerabilities, and ensure compliance with security standards and regulations. Strong knowledge of cybersecurity tools, risk management, and relevant certifications like CISSP or CISM are often required.

What are some common challenges Information Security Officers face when implementing security policies across an organization?

Information Security Officers often encounter challenges such as gaining buy-in from various departments, ensuring staff compliance with security procedures, and keeping up with rapidly evolving cyber threats. Balancing robust security measures with business operations can also be demanding, as overly strict policies may hinder productivity. Successful officers typically address these challenges by fostering a culture of security awareness, collaborating closely with IT and management, and continuously updating policies to reflect current risks.

Is SOC an entry level job?

A Security Operations Center (SOC) analyst role is typically considered an entry-level or early-career position in cybersecurity, often requiring foundational knowledge of security tools, monitoring, and incident response. However, some SOC roles may require prior experience or certifications like CompTIA Security+ or Cisco CCNA, depending on the organization's complexity. Advancement usually involves gaining experience and additional certifications in cybersecurity.

Can you make $500,000 a year in cyber security?

Information Security Officers and senior cybersecurity professionals can potentially earn $500,000 or more annually, especially with extensive experience, advanced certifications like CISSP or CISM, and leadership roles such as Chief Information Security Officer (CISO). High salaries are often associated with large organizations, specialized skills, and strategic responsibilities in cybersecurity management. However, such compensation levels are not typical for entry- or mid-level positions.
More about Information Security Officer jobs
What are popular job titles related to Information Security Officer jobs in Reston, VA? For Information Security Officer jobs in Reston, VA, the most frequently searched job titles are:
What job categories do people searching Information Security Officer jobs in Reston, VA look for? The top searched job categories for Information Security Officer jobs in Reston, VA are:
What cities near Reston, VA are hiring for Information Security Officer jobs? Cities near Reston, VA with the most Information Security Officer job openings:
Information Security Officer jobs near you
Infographic showing various Information Security Officer job openings in Reston, VA as of July 2026, with employment types broken down into 1% As Needed, 74% Full Time, 21% Part Time, 1% Temporary, and 3% Contract. Highlights an 96% Physical, 1% Hybrid, and 3% Remote job distribution, with an average salary of $98,938 per year, or $47.6 per hour.

Information Security Officer

Strategic Operational Solutions

Washington, DC • On-site

Full-time

Re-posted 13 days ago

Job description

Brief Overview of Position:

Strategic Operational Solutions (STOPSO) is seeking candidates for an Information Security Officer role to support a federal client where we are focused on delivering innovative operations and solutions through proven successful methods. This individual is responsible for the planning, execution, and delivery of all program activities supporting the project. The Information Security Officer will ensure STOPSO provides advisory services, operational assistance for Government-managed and licensed components, and the expertise necessary to ensure secure and compliant operations.

Responsibilities:

  • Provide security advisory services and operational support to ensure a secure, compliant cloud data platform environment in Microsoft Azure
  • Support implementation and enforcement of federal security requirements including FISMA, NIST SP 800-53, FedRAMP, OMB, and DHS guidance
  • Lead security architecture and design activities including Zero Trust implementation, RBAC/ABAC access control, encryption, and identity integration
  • Oversee Authority to Operate (ATO) processes, including development of security documentation, control assessments, and coordination with Authorizing Officials and OCIO
  • Conduct continuous monitoring activities including vulnerability scanning, compliance checks, audit logging, and security metrics reporting
  • Identify, assess, and mitigate security risks, including managing POA&Ms, audit findings, and system vulnerabilities
  • Ensure proper data protection controls including encryption in transit and at rest, key management, data classification, and privacy compliance for PII/CUI/PHI
  • Support incident response activities including detection, reporting, investigation, forensics, and remediation in coordination with FTC CSIRT
  • Develop and maintain security documentation including risk assessments, system security plans, POA&Ms, and compliance artifacts
  • Provide cybersecurity input to cloud engineering efforts such as identity integration (Entra ID), SIEM integration (Microsoft Sentinel), and secure data pipeline configurations
  • Conduct vulnerability assessments, penetration testing coordination, and supply chain risk assessments for cloud services and tools
  • Collaborate with program management, engineering, and data teams to ensure security is integrated across all solution components
  • Serve as the designated Information System Security Officer (ISSO) and act as a primary point of contact for security-related audits, data calls, and compliance reviews

Minimum Qualifications

  • Bachelor's or Master's degree in Cybersecurity, Information Technology, Computer Science, or related field
  • Minimum 5 years of experience in information security, including federal cloud security environments of similar scope and complexity
  • Proven experience supporting ATO/ATU processes and continuous monitoring in government environments
  • Experience securing cloud environments, preferably Microsoft Azure, including identity, networking, and data protection controls
  • Hands-on experience with vulnerability management, incident response, and risk assessment processes
  • Ability to obtain and maintain a Public Trust clearance and comply with federal security training requirements
  • Required Certifications:
    • Certified Information Systems Security Professional (CISSP) Certification
    • Certified Cloud Security Professional (CCSP) Certification
    • CompTIA Cloud+ Certification

Skills and Competencies

  • Strong background in network security, threat detection, and vulnerability management
  • In-depth knowledge of securing cloud environments (e.g., Microsoft Azure) and services related to big data
  • Proficiency in data encryption, masking, anonymization, and data loss prevention
  • Specific expertise in securing large-scale data systems
  • Proven experience in handling security incidents from detection and analysis to recovery and post-incident reporting
  • Deep knowledge of federal cybersecurity frameworks, including NIST SP 800-53, NIST SP 800-207 (Zero Trust), and FedRAMP requirements
  • Proficiency in security technologies including SIEM tools (e.g., Microsoft Sentinel), identity and access management (Entra ID), and vulnerability scanning tools
  • Experience implementing least privilege access, RBAC/ABAC models, and secure identity federation
  • Ability to analyze complex security risks and develop actionable mitigation strategies
  • Familiarity with large-scale data systems, analytics platforms, and securing structured/unstructured data environments
  • Excellent written and verbal communication skills, including the ability to produce detailed security documentation and reports
  • Strong collaboration skills with cross-functional technical teams and government stakeholders
  • Ability to manage multiple priorities in a compliance-driven, high-security federal environment

Job Type: Full-time

Work Location: In person. All work performed under this contract shall take place at the following locations:

  • Federal Trade Commission Headquarters 600 Pennsylvania Avenue, NW Washington DC 20580
  • Federal Trade Commission GAO Building 441 G Street NW Washington DC 20548