Director of Information Security

Worker Type

Job Description

• Lead and mentor a team of information security professionals including compliance specialists compliance managers and/or analysts
• Develop and execute the information security strategy aligned with business objectives and threat landscape
• Collaborate with executive leadership on security risk management investment priorities and incident response
• Lead and write procedures on approving security exceptionsforeign traveland deviations following established risk management frameworks

• Build compliance approaches for NIST SP 800-171 CMMC DFARS ITAR EAR and other defense industry information security requirements
• Develop and maintain security policies procedures and standards
• Conduct information security risk assessments and manage risk treatment plans
• Oversee security audits assessments and government inspections
• Maintain relationships with government and third party representatives

• Review and advise on continuous monitoring compliance practices and security automation priorities
• Develop security metrics and reporting for leadership and government customers
• Manage security budget and resource allocation

• Serve as trusted advisor to business units on security requirements
• Facilitate security discussions with customers and partners
• Balance security requirements with mission effectiveness and operational efficiency
• Promote security awareness culture throughout the organization

Basic Qualifications (Required Skills & Experience)

• Bachelors degree in Cybersecurity Information Technology Computer Science or related field
• Masters degree preferred

• Minimum 10 years of progressive information security experience
• Minimum 5 years in leadership role managing security teams
• Minimum 5 years working in defense contractor or government environment
• Experience managing security programs supporting classified systems and information
• Demonstrated experience implementing and maintaining NIST 800-171 and CMMC compliance

• Expert knowledge of NIST SP 800-171 CMMC 2.0 and DFARS cybersecurity requirements
• Working knowledge of NIST Cybersecurity Framework ISO 27001/27002 and CIS Controls
• Understanding of cloud security principles and FedRAMP requirements
• Familiarity with network security endpoint protection SIEM and security operations technologies
• Knowledge of export control regulations (ITAR/EAR) and related IT security implications

• NIST SP 800-171 (Protecting CUI in Nonfederal Systems)
• CMMC (Cybersecurity Maturity Model Certification) 2.0
• DFARS 252.204-and related clauses

• Strong leadership and people management capabilities
• Excellent written and verbal communication skills including ability to present to executive audiences
• Risk management and decision-making under uncertainty
• Project and program management
• Budget management and financial planning
• Vendor management and contract oversight
• Ability to translate complex technical security concepts for non-technical stakeholders

Other Qualifications & Desired Competencies

• CISSP (Certified Information Systems Security Professional)
• CISA (Certified Information Systems Auditor)
• CCP (CMMC Certified Professional)
• CCA (CMMC Certified Assessor)
• CAP (Certified Authorization Professional)
• Security or equivalent DoD 8570 IAT Level II certification

Clearance Level

The salary range for this role is:

AeroVironment considers several factors when extending an offer including but not limited to the location the role and associated responsibilities a candidates work experience education/training and key skills.

ITAR Requirement:

This position requires access to information that is subject to compliance with the International Traffic Arms Regulations (ITAR) and/or the Export Administration Regulations (EAR). In order to comply with the requirements of the ITAR and/or the EAR applicants must qualify as a U.S. person under the ITAR and the EAR or a person to be approved for an export license by the governing agency whose technology comes under its jurisdiction. Please understand that any job offer that requires approval of an export license will be conditional on AeroVironments determination that it will be able to obtain an export license in a time frame consistent with AeroVironments business requirements. A U.S. person according to the ITAR definition is a U.S. citizen U.S. lawful permanent resident (green card holder) or protected individual such as a refugee or asylee. See 22 CFR 120.15. Some positions will require current U.S. Citizenship due to contract requirements.

Benefits: AV offers an excellent benefits package including medical dental vision 401K with company matching a 9/80 work schedule and a paid holiday shutdown. For more information about our company benefit offerings please visit: also encourage you to review our company website at to learn more about us.

Principals only need apply. NO agencies please.

About AV:

AV isnt for everyone. We hire the curious the relentless the mission-obsessed. The best of the best.

We dont just build defense technologywe redefine whats possible. As the premier autonomous systems company in the U.S. AV delivers breakthrough capabilities across air land sea space and cyber. From AI-powered drones and loitering munitions to integrated autonomy and space resilience our technologies shape the future of warfare and protect those who serve.

Founded by legendary innovator Dr. Paul MacCready AV has spent over 50 years pushing the boundaries of what unmanned systems can do. Our heritage includes seven platforms in the Smithsonianbut were not building history were building whats next.

If youre ready to build technology that matterswith speed scale and purposetheres no better place to do it than AV.

We are proud to be an EEO/AA Equal Opportunity Employer including disability/veterans. AeroVironment Inc. is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Qualified applicants will receive fair and impartial consideration without regard to race sex color religion national origin age disability protected veteran status genetic datasexual orientation gender identity or other legally protected status.

ITAR