Chief Information Security Officer

Office of Personnel Management; Washington (District of Columbia); Remote; USD 169,000 - 197,000; Full time

Job summary

OPM is seeking a Chief Information Security Officer-level leader to direct agency-wide cybersecurity policies, risk management, security engineering, incident response, and supply chain security programs. The role includes managing resources to protect agency systems and information.

The position oversees governance, assessments, compliance, and audits, and leads security initiatives across the system development lifecycle. Telework is eligible; salary range posted.

Responsibilities

• Direct agency-wide cybersecurity policies, data classification standards, and security requirements for information systems and secure software development.
• Oversee governance, risk assessments, security authorization recommendations, compliance monitoring, vulnerability remediation, and audits.
• Lead the agency's supply chain risk management program and embedded security engineering across the lifecycle.
• Manage cybersecurity budgets, contracts, resources, and advise leadership on security risks.

Job description

• Hiring Agency: Office of Personnel Management
• Department: Other Agencies and Independent Organizations
• Location: Multiple Locations
• Hiring Path: Fed Transition
• Number of Openings: 1
• Security Clearance: Sensitive Compartmented Information

As the Chief Information Security Officer with the U.S. Office of Personnel Management, Office of the Chief Information Officer, you will direct agency-wide cybersecurity policies, risk management, security engineering, incident response, and supply chain security programs while managing resources to protect agency systems and information.

Key Responsibilities

Direct agency-wide cybersecurity policies, data classification standards, and security requirements governing information systems, emerging technologies, and secure software development. Oversee cybersecurity governance, risk assessments, security authorization recommendations, compliance monitoring, vulnerability remediation, and responses to audits and oversight requirements.

Direct the agency's supply chain risk management program, including assessments of third-party security risks, acquisition security requirements, and software supply chain protections. Manage the embedded security engineering program, establishing security review processes, engineering standards, and safeguards throughout the system development lifecycle.

Lead agency-wide cybersecurity incident response, including incident declarations, containment and recovery coordination, required reporting, and corrective action tracking. Supervise cybersecurity personnel through subordinate supervisors and team leads, including performance management, staffing, employee development, and workforce planning.

Manage cybersecurity program budgets, contracts, and resources; advise senior leadership on security risks; and represent the agency in government-wide cybersecurity initiatives

Which agency is hiring for this position?

This position is with Office of Personnel Management, Other Agencies and Independent Organizations.

What is the salary for this position?

The posted pay range is $169279 – $197200/yr.

Is this position remote or telework eligible?

This position is eligible for telework.

What security clearance is required?

This position requires a Sensitive Compartmented Information security clearance.

What is the application deadline?

Applications close on 2026-11-06.

Who is eligible to apply?

This position is open under the 'Fed Transition' hiring path.