The average ISSO salary is $118,327.
The average DoD ISSO salary is $152,984.
That $34,000 gap doesn’t happen by accident. It’s the result of clearances, specialized frameworks (RMF, eMASS, NIST 800-53), and the fact that DoD cyber positions are genuinely hard to fill. If you’re working in DoD cybersecurity and you’re not in that upper range — or you want to get there — this post explains exactly what’s driving the numbers and what you can do about it.
What Actually Determines ISSO Pay
Before the tables, the variables:
1. Agency / Component
DoD ISSOs (Army, Navy, Air Force, CYBERCOM, DIA, NSA, combatant commands) consistently earn more than civilian agency ISSOs. The demand is higher, the clearance requirements are stricter, and the work is more operationally intense.
2. Clearance Level
Secret vs. TS/SCI is one of the biggest individual levers. More on this below.
3. GS Grade (for federal employees)
GS-12 vs. GS-13 vs. GS-14 is the primary salary structure for government ISSO positions.
4. Location / Locality Pay
Federal salaries include locality adjustments. Hawaii pays 8.64% locality on top of base. DC area pays ~32%. This matters.
5. Employment Type
GS direct, W2 contractor, or C2C contractor — each has a different compensation structure and different trade-offs.
6. Certifications
CISSP, CISM, and CAP each affect where you land on the salary ladder and whether you’re eligible for certain positions at all.
GS Pay Scale: What DoD ISSO Grades Actually Look Like
Most federal ISSO positions land between GS-12 and GS-14. Here’s the 2026 reality:
| Grade | Base Pay Range | With Hawaii Locality (8.64%) | With DC Locality (~32%) |
|---|---|---|---|
| GS-12 | $89,128 – $115,866 | $96,822 – $125,873 | $117,649 – $153,143 |
| GS-13 | $105,896 – $137,667 | $115,044 – $149,558 | $139,783 – $181,921 |
| GS-14 | $125,133 – $162,672 | $135,945 – $176,740 | $165,176 – $214,967 |
What grade you’ll land at depends on years of experience, clearance, and what the position description specifies. Most working ISSOs with 3+ years and a qualifying cert (Security+, CISSP, CAP) come in at GS-12 or GS-13.
GS-14 ISSOs are typically senior lead ISSOs or those with program-level scope — closer to the ISSM function in practice.
Hawaii / INDOPACOM Specifics
If you’re supporting DoD missions in Hawaii — Navy at Pearl Harbor, Army at Schofield/Fort Shafter, PACOM-adjacent commands, or any of the joint programs — here’s what the numbers look like on the ground:
- GS-12 ISSO in Hawaii: ~$97K–$126K
- GS-13 ISSO in Hawaii: ~$115K–$150K
- GS-14 ISSO in Hawaii: ~$136K–$177K
Hawaii locality pay (8.64%) is lower than DC (~32%), but the cost of living gap can work in your favor if you’re comparing to CONUS positions with similar base pay.
INDOPACOM has historically enforced cyber workforce qualification requirements (DoD 8140 work role mapping, cert compliance) more consistently than many CONUS commands. This means the ceiling for unqualified ISSOs is lower, but the floor for certified ISSOs is more predictable. See: DoD 8140 vs 8570: What Changed and What It Means for Your ISSO Career.
Contractor vs. GS: The Real Comparison
Most guides get this wrong by comparing contractor bill rates to GS base pay. The right comparison:
| Employment Type | Effective Annual Comp (GS-13 equivalent ISSO) |
|---|---|
| GS-13 Direct Hire (Hawaii) | $115K–$150K salary + benefits (~30% of salary value) |
| W2 Contractor | $110K–$145K salary, benefits package varies |
| C2C / 1099 Contractor | $140K–$190K+ gross, but you cover all benefits + self-employment tax |
The math on C2C: If a C2C ISSO bills at $75–$90/hour (common range for TS/SCI in Hawaii), that’s $156K–$187K gross annually. Subtract self-employment tax (~15.3%), health insurance (~$8K–$15K/year), retirement contributions, and potential gaps between contracts — and the real take-home often lands close to a GS-13 with full benefits.
When GS wins: Stability, step increases, FEHB coverage, TSP matching (5%), annual/sick leave, and FERS pension make GS very competitive when you add up total compensation.
When C2C wins: Short-term cash, flexibility, and the ability to capture rate increases on contract renewals faster than GS step increases allow.
The Clearance Premium
Clearances add real money. The gap between Secret and TS/SCI is significant:
| Clearance Level | Salary Premium Estimate |
|---|---|
| Secret | Baseline (minimum for most ISSO positions) |
| Top Secret | +$10K–$20K vs. Secret-only equivalent |
| TS/SCI | +$15K–$30K vs. Secret-only equivalent |
| TS/SCI + Polygraph | +$25K–$45K (especially with CI or Full Scope poly) |
TS/SCI-cleared ISSOs are in shorter supply than demand — especially in intelligence-adjacent commands. That supply constraint holds salaries up. If you have a TS/SCI and aren’t in a role that compensates you for it, you’re leaving money on the table.
How Certifications Move the Number
Not all certs affect pay equally:
CISSP — The most salary-relevant cert for ISSOs. It qualifies you for GS-13/14 and contractor positions requiring IAM Level III under DoD 8140 (MGT-001/MGT-002 work roles), signals readiness for ISSM-track positions, and typically adds $10K–$20K in negotiating leverage vs. non-CISSP candidates for equivalent roles. If you’re serious about staying in this field, this is the cert to prioritize. The ISC2 CISSP Official Study Guide is the go-to prep resource if you’re starting that process.
CISM (Certified Information Security Manager) — Strong for management-track roles. Useful at GS-13+ and for contractor bids on program-level security management work. Less common in the field than CISSP, which gives you less comparison pressure in negotiations.
CAP (Certified Authorization Professional) — Specifically RMF-focused and underrated. Rare enough that it stands out in a candidate pool. Valuable for positions where the hiring manager specifically wants someone who understands the full authorization process end-to-end.
Security+ — Table stakes. Required for DoD 8140 baseline compliance at lower IAM levels. Won’t add significant salary leverage beyond baseline qualification for established ISSOs.
Three Ways to Actually Earn More
1. Clearance upgrade
If you’re at Secret and eligible for TS/SCI, initiating or supporting a clearance upgrade is the single highest-ROI move. The premium is immediate on your next role change and compounds over your career.
2. Get CISSP
It’s the most transferable, most recognized credential for senior ISSO and ISSM roles in the DoD market. The salary gap between CISSP and non-CISSP ISSOs at the same experience level is real and persistent.
3. Move toward ISSM scope
The jump from ISSO to ISSM typically adds $30K–$50K. It’s not just a title — it’s a scope and authority change that the market prices accordingly. See the full breakdown: ISSM vs ISSO: What’s the Real Difference and How to Make the Jump.
The bottom line: If you’re a working ISSO in the DoD space and you’re below $120K, something is off — your grade, your clearance, your cert, or your contract. The market is paying significantly more for qualified, cleared, CISSP-holding ISSOs, especially in TS/SCI environments. The numbers exist. The question is positioning yourself to capture them.
Getting the higher number starts in the interview room — 25 ISSO interview questions and answers from a practicing ISSO covers what hiring panels actually ask at these grades. And if you’re not in the field yet, the 6-month plan for getting a cybersecurity job with no experience lays out the entry path these salaries sit on top of.
Ready to move toward the ISSM salary band? The full career path — what to do at Year 1–2, Year 3–4, Year 5+, what certs to stack, and what actually gets you promoted — is all here: ISSM vs ISSO: What’s the Real Difference and How to Make the Jump
Track your RMF work like an ISSM does: the ISSO’s RMF Checklist ($27) and POA&M Tracker ($37) are built for exactly that.
Related reading: Pay tracks the role, not the acronym. Before you target a title, compare the three side by side in ISSO vs ISSM vs ISSE: what is the actual difference (and which pays more).
Leave a Reply