Director of Information Security

Worker TypeRegularJob DescriptionCompany OverviewAV is a leading defense technology company delivering mission-critical solutions to government and commercial customers. We are seeking an experienced Director of Information Security to lead our cybersecurity program and ensure the protection of sensitive national security information.SummaryThe Director of Information Security will lead the organization's information security program, ensuring compliance with defense industry regulations, managing information security, and supervising a team of ~5 professionals. This role requires deep expertise in defense contractor security requirements and the ability to balance rigorous security controls with operational efficiency.Position ResponsibilitiesLeadership & ManagementLead and mentor a team of information security professionals including compliance specialists, compliance managers, and/or analystsDevelop and execute the information security strategy aligned with business objectives and threat landscapeCollaborate with executive leadership on security risk management, investment priorities, and incident responseLead and write procedures on approving security exceptions, foreign travel, and deviations following established risk management frameworksCompliance & Risk ManagementBuild compliance approaches for NIST SP 800-171, CMMC, DFARS, ITAR, EAR, and other defense industry information security requirementsDevelop and maintain security policies, procedures, and standardsConduct information security risk assessments and manage risk treatment plansOversee security audits, assessments, and government inspectionsMaintain relationships with government and third party representativesProgram ManagementReview and advise on continuous monitoring, compliance practices, and security automation prioritiesDevelop security metrics and reporting for leadership and government customersManage security budget and resource allocationBusiness PartnershipServe as trusted advisor to business units on security requirementsFacilitate security discussions with customers and partnersBalance security requirements with mission effectiveness and operational efficiencyPromote security awareness culture throughout the organizationBasic Qualifications (Required Skills & Experience)EducationBachelor's degree in Cybersecurity, Information Technology, Computer Science, or related fieldMaster's degree preferredExperienceMinimum 10 years of progressive information security experienceMinimum 5 years in leadership role managing security teamsMinimum 5 years working in defense contractor or government environmentExperience managing security programs supporting classified systems and informationDemonstrated experience implementing and maintaining NIST 800-171 and CMMC complianceTechnical KnowledgeExpert knowledge of NIST SP 800-171, CMMC 2.0, and DFARS cybersecurity requirementsWorking knowledge of NIST Cybersecurity Framework, ISO 27001/27002, and CIS ControlsUnderstanding of cloud security principles and FedRAMP requirementsFamiliarity with network security, endpoint protection, SIEM, and security operations technologiesKnowledge of export control regulations (ITAR/EAR) and related IT security implicationsCompliance FrameworksNIST SP 800-171 (Protecting CUI in Nonfederal Systems)CMMC (Cybersecurity Maturity Model Certification) 2.0DFARS View phone number on click.appcast.io, 7019, 7020, 7021, and related clausesSkills Strong leadership and people management capabilitiesExcellent written and verbal communication skills, including ability to present to executive audiencesRisk management and decision-making under uncertaintyProject and program managementBudget management and financial planningVendor management and contract oversightAbility to translate complex technical security concepts for non-technical stakeholdersOther Qualifications & Desired CompetenciesCertifications (Preferred)CISSP (Certified Information Systems Security Professional)CISA (Certified Information Systems Auditor)CCP (CMMC Certified Professional)CCA (CMMC Certified Assessor)CAP (Certified Authorization Professional)Security+ or equivalent DoD 8570 IAT Level II certificationAdditional ExperienceExperience in aerospace, intelligence, or weapons systems environmentFedRAMP (Federal Risk and Authorization Management Program)FIPS 140-2/140-3 cryptographic module validationDoD Cloud Computing SRGNIST SP 800-37 (RMF Application) and SP 800-53ISO 27001 certification experienceSecurity architecture designSoftware security and secure development lifecycleSupply chain risk managementExport control and OPSEC experienceGovernment liaison and relationship managementChange management and organizational transformationPhysical DemandsAbility to work in an office environment (Constant)Required to sit and stand for long periods; talk, hear, and use hands and fingers to operate a computer and telephone keyboard (Frequent)Special RequirementsU.S. Citizen, U.S. Permanent Resident (Green Card holder) or asylee/refugee status as defined by 8 U.S.C. 1324b(a)(3) required.Clearance LevelNo ClearanceThe salary range for this role is:$170,500 - $272,750AeroVironment considers several factors when extending an offer, including but not limited to, the location, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills.ITAR Requirement:This position requires access to information that is subject to compliance with the International Traffic Arms Regulations (“ITAR”) and/or the Export Administration Regulations (“EAR”). In order to comply with the requirements of the ITAR and/or the EAR, applicants must qualify as a U.S. person under the ITAR and the EAR, or a person to be approved for an export license by the governing agency whose technology comes under its jurisdiction. Please understand that any job offer that requires approval of an export license will be conditional on AeroVironment’s determination that it will be able to obtain an export license in a time frame consistent with AeroVironment’s business requirements. A “U.S. person” according to the ITAR definition is a U.S. citizen, U.S. lawful permanent resident (green card holder), or protected individual such as a refugee or asylee. See 22 CFR § 120.15. Some positions will require current U.S. Citizenship due to contract requirements. Benefits: AV offers an excellent benefits package including medical, dental vision, 401K with company matching, a 9/80 work schedule and a paid holiday shutdown. For more information about our company benefit offerings please visit: .We also encourage you to review our company website at to learn more about us.Principals only need apply. NO agencies please.About AV:AV isn’t for everyone. We hire the curious, the relentless, the mission-obsessed. The best of the best.We don’t just build defense technology—we redefine what’s possible. As the premier autonomous systems company in the U.S., AV delivers breakthrough capabilities across air, land, sea, space, and cyber. From AI-powered drones and loitering munitions to integrated autonomy and space resilience, our technologies shape the future of warfare and protect those who serve.Founded by legendary innovator Dr. Paul MacCready, AV has spent over 50 years pushing the boundaries of what unmanned systems can do. Our heritage includes seven platforms in the Smithsonian—but we’re not building history, we’re building what’s next.If you're ready to build technology that matters—with speed, scale, and purpose—there’s no better place to do it than AV.We are proud to be an EEO/AA Equal Opportunity Employer, including disability/veterans. AeroVironment, Inc. is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Qualified applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, protected veteran status, genetic data, sexual orientation, gender identity or other legally protected status.ITARU.S. Citizenship requiredSummaryLocation: Arlington, VA; Albuquerque, NM; Huntsville, AL; Pottstown, PA; Simi Valley, CA; Herndon, VA; Remote - North Carolina; Germantown, MDType: Full time