Chief Information Security Officer (CISO) with Security Clearance

Duties As the Chief Information Security Officer (CISO) for the Department of the Air Force, you will serve as a key executive leader directing the cybersecurity strategy and cyber defense programs across the U.S. Air Force and U.S. Space Force. In this high-impact role, you will advise senior leaders, shape enterprise-wide cybersecurity policies, and ensure the resilience of global operations and systems against emerging cyber threats. You will:

• Direct and manage a comprehensive, DAF-wide cybersecurity program to ensure the confidentiality, integrity and availability of all supporting information systems.
• Establish and oversee policies and procedures based on the DoD Risk Management Framework (RMF) to consistently identify, assess and mitigate information security risks.
• Serve as the DAF Senior Agency Official for Privacy (SAOP) and the Senior Agency Official for Records Managemenbt (SAORM).
• Lead the development, validation and prioritization of Cyberspace Operational capability requirements and doctrine.
• Direct enterprise security awareness and training programs for all personnel and contractors, alongside periodic testing of security controls.
• Establish processes to detect, report and swiftly respond to cybersecurity incidents and rectify any identified policy or practice deficiencies.
• Engage in real-time cyber defense operations and cyber command and control (C2) to integrate global effects.
• Collaborate with executive-level experts, Defense Industrial Base representatives, and academia to identify strategic gaps and leverage emerging cybersecurity technologies.
• Advise senior leaders (including DoD, Joint Staff and Combatant Commands) on current cybersecurity trends, metrics and cyber defense planning.
• Provide executive supervision, guidance and leadership for four divisions comprising military, civilian and contractor personnel. Requirements Conditions of employment
• U.S. citizenship is required
• Males must be registered for Selective Service, see www.sss.gov
• Disclosure of Political Appointments
• Mobility is a condition of employment and appointment for SES members will be required to sign a Reassignment Rights and Obligations Agreement
• Selected candidate must file a Executive Personnel Financial Disclosure Report (OGE Form 278) in accordance with the Ethics in Government Act of 1978
• Position has been designated Critical-Sensitive and the selectee must have or be able to obtain a Top Secret clearance
• Drug testing designated position. The incumbent is subject to random testing for drug use IAW Exec. Order 12564, dated 14 Sep 86. Position requires that the incumbent sign a Drug Testing letter and pass urinalysis testing prior to appointment.
• Position requires travel under conditions specified in the DoD Joint Travel Regulations. Incumbent is expected to travel on short notice to attend high-level meetings.
• Position may require incumbent to be available for other than normal duty hours to include weekends to support exercises and crisis planning.
• An initial SES career appointment becomes final only after the individual successfully completes a 1-year probationary period.
• Attendance to the Air Force's Senior Leader Orientation Course (SLOC) is generally required within 12 months of appointment, subject to course availability.
• Position may be subject to the post-government employment restrictions of Sections 207(a) and (f) of Title 18, United States Code.
• Applicants in receipt of an annuity based on civilian employment in the Federal Service are subject to the DoD Policy on The Employment of Annuitants.
• You may be required to sign a "Drug Test Statement of Understanding" if you are selected for this position.
• Within the Department of War, the appointment of retired military members within 180 days immediately following retirement date to a civilian position is subject to the provisions of 5 United States Code 3326.

Qualifications Eligibility will be based upon a clear showing the applicant has training, education and experience of the scope and quality sufficient to effectively carry-out the duties of the position. Candidates must exemplify the corporate perspective, leadership vision, broad experience and character needed in the SES corps not only to satisfy the immediate vacancy, but future vacancies which will occur in a variety of organizations, functions and locations.

In accordance with the new OPM requirements to streamline Senior Executive Service (SES) hiring, applicants are no longer required to submit lengthy narrative essays, including those for Executive Core Qualifications (ECQs) or Mandatory Technical Qualifications (TQs) when applying. Instead, the initial application will be resume-only, capped at two pages . This change streamlines the application process and more closely aligns with private industry practice.

Applicants identified for potential selection will have their ECQs assessed by undergoing a structured interview with the Office of Personnel Management (OPM) Qualifications Review Board. To meet minimum qualifications requirements for this position, you must show that you possess the education, Technical Qualifications (TQ) and Executive Core Qualifications (ECQ) related to this position within your resume (not to exceed 2 pages) . Resumes over the 2-page limit will be disqualified.

Your resume should include examples of experience, education and accomplishments applicable to the qualification(s). If your resume does not reflect demonstrated evidence of the ECQs and TQs, you may not receive further consideration for this position.

CERTIFICATIONS: The incumbent must possess or be willing to obtain Cybersecurity Workforce Management certification (8570.01 IAM level III) or equivalent within one year of gaining the position.

TQ1: Enterprise Cybersecurity Strategy, Governance, and Risk Management Demonstrated senior executive experience leading enterprise-wide cybersecurity strategy, governance, and risk management within a large, complex organization. This includes establishing cybersecurity policies, standards, and accountability frameworks; aligning security investments and priorities with organizational mission objectives; and advising senior executives on enterprise cyber risk, risk acceptance, and resource allocation. Proven ability to influence enterprise decisions, drive organizational change, and establish measurable improvements in cybersecurity posture and resilience.

TQ2: Cybersecurity Operations, Enterprise Risk Reduction, and Mission Resilience Demonstrated senior executive experience overseeing complex cybersecurity programs and operations to protect mission-critical systems, networks, data, and services. This includes directing enterprise cyber defense, vulnerability and exposure management, incident response, and security modernization initiatives; integrating cybersecurity into enterprise technology architectures and operations; and translating threat intelligence and operational risk into prioritized action. Proven ability to lead multidisciplinary organizations, establish clear accountability, and deliver measurable risk reduction and operational resilience across a distributed enterprise.

TQ3: Executive Leadership and Enterprise Transformation Demonstrated senior executive experience leading large, multidisciplinary organizations through complex cybersecurity transformation. This includes aligning organizational structures, authorities, resources, and performance measures to enterprise priorities; influencing senior stakeholders across organizational boundaries; and overcoming institutional barriers to deliver measurable outcomes. Proven ability to establish accountability, develop executive talent, and lead sustained organizational change.

EXECUTIVE CORE QUALIFICATIONS (ECQs) : All new appointees to the Senior Executive Service (SES) under a career appointment will be assessed for executive competency against the five mandatory ECQs: ECQ 1. Commitment to the Rule of Law and the Principles of the American Founding:Demonstrated knowledge of the American system of government, commitment to uphold the Constitution and the rule of law, and commitment to serve the American people. ECQ 2.

Driving Efficiency:Demonstrated ability to strategically and efficiently manage resources, budget effectively, cut wasteful spending, and pursue efficiency through process and technological upgrades. ECQ 3.

Merit and Competence: Demonstrated knowledge, ability, and technical competence to effectively and reliably produce work that is of exceptional quality. ECQ 4.

Leading People:Demonstrated ability to lead and inspire a group toward meeting the organization's vision, mission, and goals, and to drive a high-performance, high-accountability culture. This includes, when necessary, the ability to lead people through change and to hold individuals accountable. ECQ 5.

Achieving Results:Demonstrated ability to achieve both individual and organizational results, and to align results to stated goals from superiors. Please note : If you are a member of the SES or have been certified through successful participation in an OPM approved SES Candidate Development Program, or have SES reinstatement eligibility, you must attach proof (e.g., SF-50 or Certification by OPM's SES Qualifications Review Board) of your eligibility for noncompetitive appointment to the SES.

Education Education: A Bachelor's or Master's Degree in an Information Technology related field (e.g., Cybersecurity, Computer Science, Data Science or Information Systems) is desired. Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) and/or Certified Information Systems Auditor (CISA) certification is highly desired. In addition, DoW requires an Enterprise Perspective. The individual must possess a broad point of view and an awareness and understanding of individual or organizational responsibilities in relation to DoW or government-wide s