Air Force cybersecurity chief tapped to lead Pentagon's information-security efforts

The Department of Defense has a new acting leader for its cybersecurity enterprise, with the agency tapping former Air Force Chief Information Security Officer James “Aaron” Bishop to serve as the department-wide CISO and deputy chief information officer for cybersecurity. 

The move was announced Feb. 27, a Pentagon spokesperson confirmed to Nextgov/FCW on Thursday.

Bishop takes over for David McKeown, who is retiring from the government after more than four decades in federal service. McKeown had been serving as CISO in an acting capacity.

“The DCIO(CS)-CISO is a critical position, responsible for providing expert policy, technical, program, and Department-wide oversight support to the DoW CIO on all cybersecurity matters,” the spokesperson said. “Mr. Bishop brings an extensive and unique blend of industry, federal, and transformational experience that will be critical as the Department focuses on [Defense] Secretary [Pete] Hegseth’s charge for lethality, efficiency and warfighter readiness.”

The appointment comes after Katie Arrington, who spearheaded the Cybersecurity Maturity Model Certification program during the first Trump administration, returned to the department in early 2025 to perform the duties of the CIO in an acting capacity. She left DOD in January to join the quantum computing firm IonQ.

Before the Air Force, Bishop was the CISO, VP of Enterprise Business Transformation and Chief Architect at Science Applications International Corporation. He previously served as General Manager of Microsoft Corporation’s National Security Group. Earlier in his career, he was Chief Technologist at Keane Federal Systems and CTO of ANSTEC. He is also a Navy veteran.