ZipRecruiter

Log In

1

Nonprofit Cybersecurity Jobs (NOW HIRING)

previous pagenext page

Showing results 21-40

All JobsTechnology JobsNonprofit Cybersecurity Jobs

Nonprofit Cybersecurity information

See salary details

$38.5K

$58.2K

$87K

How much do nonprofit cybersecurity jobs pay per year?

As of Aug 18, 2026, the average yearly pay for nonprofit cybersecurity in the United States is $58,171.00, according to ZipRecruiter salary data. Most workers in this role earn between $48,000.00 and $64,500.00 per year, depending on experience, location, and employer.

What is nonprofit cybersecurity?

Nonprofit cybersecurity refers to the practices and technologies that nonprofit organizations use to protect their digital information, systems, and networks from cyber threats. Nonprofits often handle sensitive donor, client, and financial data, making them targets for cyberattacks. Effective cybersecurity helps prevent data breaches, protects organizational reputation, and ensures compliance with legal and ethical standards. Due to limited resources, nonprofits may adopt cost-effective security measures and seek partnerships or guidance to strengthen their defenses.

What are some common cybersecurity challenges faced by nonprofit organizations, and how does this role help address them?

Nonprofit organizations often operate with limited budgets and staff, which can make implementing robust cybersecurity measures challenging. Common issues include outdated technology, lack of dedicated IT personnel, and heightened risk of phishing or data breaches due to handling sensitive donor information. In a nonprofit cybersecurity role, you’ll focus on identifying vulnerabilities, training staff on security best practices, and implementing cost-effective safeguards tailored to nonprofit needs. Your work directly helps protect the organization’s reputation and the privacy of its donors, ensuring mission-critical operations continue smoothly.

What are the key skills and qualifications needed to thrive in nonprofit cybersecurity, and why are they important?

To thrive in Nonprofit Cybersecurity, you need a solid understanding of information security principles, risk management, and compliance, often backed by a degree in cybersecurity or a related field. Familiarity with security tools like firewalls, intrusion detection systems, and certifications such as CompTIA Security+ or CISSP are typically required. Strong communication, problem-solving, and a collaborative mindset help translate technical risks to non-technical stakeholders and foster a security-focused culture. These skills ensure that limited resources are effectively used to protect sensitive data and maintain trust with donors, clients, and the community.

What is the difference between Nonprofit Cybersecurity vs Nonprofit IT Specialist?

AspectNonprofit CybersecurityNonprofit IT Specialist
CertificationsCybersecurity certifications (e.g., CISSP, CompTIA Security+)IT certifications (e.g., CompTIA A+, Network+)
Work EnvironmentFocus on security measures, threat mitigation, and risk managementBroader IT support, hardware/software management, network setup
Employer & Industry UsageNonprofit organizations with a focus on data securityNonprofits needing general IT support and infrastructure
Search & Comparison IntentUnderstanding cybersecurity roles in nonprofitsGeneral IT support roles in nonprofits

Nonprofit Cybersecurity specialists focus on protecting organizational data and systems from cyber threats, requiring security-specific certifications. Nonprofit IT Specialists handle broader technology support, including hardware, software, and network management. While both roles serve nonprofit organizations, cybersecurity roles emphasize security protocols and threat mitigation, whereas IT specialists provide general technology support.

More about Nonprofit Cybersecurity jobs

What cities are hiring for Nonprofit Cybersecurity jobs?

Cities with the most Nonprofit Cybersecurity job openings:

What states have the most Nonprofit Cybersecurity jobs?

States with the most job openings for Nonprofit Cybersecurity jobs include:

What job categories do people searching Nonprofit Cybersecurity jobs look for?

The top searched job categories for Nonprofit Cybersecurity jobs are:

Nonprofit Cybersecurity jobs near you
Infographic showing various Nonprofit Cybersecurity job openings in the United States as of August 2026, with employment types broken down into 1% Internship, 3% As Needed, 75% Full Time, 20% Part Time, and 1% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution, with an average salary of $58,171 per year, or $28 per hour.

Cyber Security & Compliance Specialist

Melwood Veterans Services

Upper Marlboro, MD • On-site

Full-time

Re-posted 20 days ago

Job description

The Cybersecurity and Compliance Specialist is responsible for protecting Melwood's information systems, data, and technology infrastructure through the ongoing implementation, monitoring, and management of enterprise cybersecurity controls and regulatory compliance programs. This role serves as the organization's primary internal subject matter expert on cybersecurity frameworks applicable to federal contractors and regulated nonprofit environments, working in close coordination with IT leadership and external compliance advisors to build and sustain a compliant, resilient, and continuously improving security posture. The Cybersecurity and Compliance Specialist supports the preparation and maintenance of required compliance documentation, manages the organization's security operations practices, and ensures that Melwood's technology environment meets its obligations to employees, program participants, funders, and government partners. This position requires an individual with both the technical hands-on capability to implement and monitor security controls and the analytical discipline to manage compliance programs, track remediation commitments, and communicate risk clearly and accurately to leadership.
Responsibilities:
  • Manage the Cybersecurity Compliance Program: Develop, implement, and maintain the organization's cybersecurity compliance program across all applicable regulatory, contractual, and industry standards frameworks. Current primary obligations include federal contractor cybersecurity requirements, healthcare privacy and security standards, federal grants management requirements, and commercial assurance standards. Maintain required compliance documentation including the System Security Plan (SSP) and Plan of Action and Milestones (POA&M). Track remediation commitments, coordinate with IT staff and technology partners on control implementation, and prepare the organization for third-party assessments and audits across all applicable compliance domains.
  • Conduct Security Assessments and Gap Analysis: Perform ongoing assessments of the organization's security posture against all applicable regulatory, contractual, and standards frameworks. Identify control gaps, document findings, assign remediation ownership, and track closure through to completion. Support external assessors, auditors, and certification bodies with documentation, evidence, and technical response regardless of which framework or standard is driving the review
  • Manage Vulnerability and Patch Programs: Administer the organization's vulnerability management program including scheduled scanning, findings triage, remediation coordination, and reporting. Work with IT infrastructure and application teams to ensure security patches are applied within required timeframes consistent with applicable framework obligations and organizational risk tolerance. Ensure that exceptions are documented, justified, and approved by appropriate authority
  • Support Continuous Security Monitoring and Incident Response: Support continuous security monitoring through the organization's security platforms and endpoint protection tools. Investigate alerts, analyze anomalies, and coordinate incident response activities. Maintain the organizational incident response plan and ensure it reflects current regulatory reporting obligations. Prepare and submit required incident reports in accordance with all applicable federal, state, contractual, and regulatory requirements, which may include healthcare privacy laws, federal contractor obligations, and grants management standards.
  • Manage Data Classification and Regulated Data Protection: Support the identification, classification, and protection of all regulated information categories across organizational systems. Current regulated categories include Controlled Unclassified Information, Protected Health Information, and Personally Identifiable Information subject to federal and state privacy requirements. Implement and maintain appropriate data classification controls, access restrictions, and monitoring in coordination with IT and business stakeholders. Monitor applicable state and federal privacy regulations for changes that affect organizational obligations and bring material changes to the attention of IT leadership
  • Manage Third-Party and Vendor Risk: Evaluate technology vendors and third-party service providers for cybersecurity compliance and risk posture across all applicable frameworks. Review vendor agreements for appropriate security, data handling, and regulatory flow-down obligations including Business Associate Agreements for vendors handling Protected Health Information. Assess software configurations and embedded technology features for compliance with organizational data classification policies and all applicable regulatory requirements, not limited to federal contractor standards.
  • Deliver Security Training and Awareness: Develop and deliver cybersecurity awareness training for all staff covering responsible technology use, data protection obligations across all applicable regulatory categories, threat recognition, and incident reporting procedures. Ensure training content reflects the full scope of the organization's regulatory environment and is accessible to staff across all roles and technical literacy levels. Maintain documented training completion records and coordinate role-specific training for IT staff and employees with access to regulated data.
  • Maintain Security Documentation and Reporting: Produce accurate and timely security documentation and reporting for internal leadership and external reviewers across all applicable compliance domains. Documentation may include compliance status reports, risk registers, audit evidence packages, remediation tracking, and regulatory submissions. Communicate security, risk and compliance status clearly and concisely to non-technical audiences including organizational leadership, legal counsel, and program leadership. Ensure that reporting reflects the full scope of the organization's compliance obligations and does not treat any single framework as the exclusive measure of the organization's security posture

Qualifications:
  • Bachelors degree in information Technology, Information technology, computer science or a related field is required.
  • 5+ years in a cyber security or related position is required
  • Certified information systems security professional and 5 years of experience will be considered if the candidate does not have a degree.
  • Experience in a federal contracting environment is preferred.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.

Apply