DHS CISO, deputy CISO exit amid reported IT leadership overhaul | FedScoop<\/title> <meta name=\"description\" content=\"Two sources tell FedScoop the personnel changes are part of a broader effort to consolidate IT and cybersecurity functions at DHS headquarters.\"> <link rel=\"canonical\" href=\"https:\/\/fedscoop.com\/dhs-it-leadership-overhaul-includes-ciso-deputy-ciso\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"DHS CISO, deputy CISO exit amid reported IT leadership overhaul\"> <meta property=\"og:description\" content=\"Two sources tell FedScoop the personnel changes are part of a broader effort to consolidate IT and cybersecurity functions at DHS headquarters.\"> <meta property=\"og:url\" content=\"https:\/\/fedscoop.com\/dhs-it-leadership-overhaul-includes-ciso-deputy-ciso\/\"> <meta property=\"og:site_name\" content=\"FedScoop\"> <meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/fedscoop\/\"> <meta property=\"article:published_time\" content=\"2026-03-06T17:42:14+00:00\"> <meta property=\"article:modified_time\" content=\"2026-03-06T17:42:17+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/03\/dhs-ciso-deputy-ciso-exit-amid-reported-it-leadership-overhaul-1.jpg\"> <meta property=\"og:image:width\" content=\"1726\"> <meta property=\"og:image:height\" content=\"966\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"lwilkinson\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:creator\" content=\"@fedscoop\"> <meta name=\"twitter:site\" content=\"@fedscoop\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"FedScoop \u00bb Feed\" href=\"https:\/\/fedscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"FedScoop \u00bb Comments Feed\" href=\"https:\/\/fedscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/fedscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1770142553g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/fedscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1770755286g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/fedscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1767808656g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=13897d660a0ac2c9c7d1\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/fedscoop.com\/wp-json\/\"><link rel=\"alternate\" title=\"JSON\" type=\"application\/json\" href=\"https:\/\/fedscoop.com\/wp-json\/wp\/v2\/posts\/89034\"><meta name=\"generator\" content=\"WordPress 6.8.3\">\n<link rel=\"shortlink\" href=\"https:\/\/fedscoop.com\/?p=89034\">\n<link rel=\"alternate\" title=\"oEmbed (JSON)\" type=\"application\/json+oembed\" href=\"https:\/\/fedscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Ffedscoop.com%2Fdhs-it-leadership-overhaul-includes-ciso-deputy-ciso%2F\">\n<link rel=\"alternate\" title=\"oEmbed (XML)\" type=\"text\/xml+oembed\" href=\"https:\/\/fedscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Ffedscoop.com%2Fdhs-it-leadership-overhaul-includes-ciso-deputy-ciso%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/fedscoop.com\/wp-content\/uploads\/sites\/5\/2023\/01\/cropped-fs_favicon-3.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/fedscoop.com\/wp-content\/uploads\/sites\/5\/2023\/01\/cropped-fs_favicon-3.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/fedscoop.com\/wp-content\/uploads\/sites\/5\/2023\/01\/cropped-fs_favicon-3.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/fedscoop.com\/wp-content\/uploads\/sites\/5\/2023\/01\/cropped-fs_favicon-3.png?w=270\"> <\/head><body class=\"wp-singular post-template-default single single-post postid-89034 single-format-standard wp-theme-scoopnewsgroup wp-child-theme-fedscoop\" id=\"readabilityBody\"> <a href=\"https:\/\/fedscoop.com\/dhs-it-leadership-overhaul-includes-ciso-deputy-ciso\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--event js-stickybar\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"24.131914893617\">\n<div class=\"single-article__header-content\" readability=\"33.360655737705\">\n<p> Two sources tell FedScoop the personnel changes are part of a broader effort to consolidate IT and cybersecurity functions at DHS headquarters. <\/p>\n<p>  <br \/>\n<audio id=\"audio-player\" src=\"https:\/\/wp-tts-cdn.api.scpnewsgrp.com\/fedscoop\/89034\/english.openai.mp3\"><\/audio> <\/p>\n<div readability=\"11\">\n<div>\n<p>Listen to this article<\/p>\n<p>  <\/p>\n<p>0:00<\/p>\n<\/p><\/div>\n<p>  <\/p>\n<p> <span id=\"tts-tooltip\">Learn more.<\/span> <span> This feature uses an automated voice, which may result in occasional errors in pronunciation, tone, or sentiment. <\/span> <\/p>\n<\/div>\n<p>  <\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"358\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/03\/dhs-ciso-deputy-ciso-exit-amid-reported-it-leadership-overhaul.jpg?resize=640%2C358&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/03\/dhs-ciso-deputy-ciso-exit-amid-reported-it-leadership-overhaul-1.jpg 1726w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/03\/dhs-ciso-deputy-ciso-exit-amid-reported-it-leadership-overhaul-1.jpg?resize=300,168 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/03\/dhs-ciso-deputy-ciso-exit-amid-reported-it-leadership-overhaul-1.jpg?resize=768,430 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/03\/dhs-ciso-deputy-ciso-exit-amid-reported-it-leadership-overhaul-1.jpg?resize=1024,573 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/03\/dhs-ciso-deputy-ciso-exit-amid-reported-it-leadership-overhaul-1.jpg?resize=1536,860 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/03\/dhs-ciso-deputy-ciso-exit-amid-reported-it-leadership-overhaul-1.jpg?resize=600,337 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/03\/dhs-ciso-deputy-ciso-exit-amid-reported-it-leadership-overhaul-1.jpg?resize=1200,672 1200w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/03\/dhs-ciso-deputy-ciso-exit-amid-reported-it-leadership-overhaul-1.jpg?resize=1500,840 1500w\" sizes=\"(max-width: 1200px) 100vw, 1200px\"><figcaption> (Department of Homeland Security \/ Flickr) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"65.924602004717\"><body readability=\"134.08841370943\"><\/p>\n<p>The Department of Homeland Security is undergoing an overhaul of its IT and information security leadership, with multiple sources telling FedScoop there is a broad realignment underway at the department to replace key technology leaders.<\/p>\n<p>FedScoop has learned that at least two DHS officials are being replaced: Chief Information Security Officer <a href=\"https:\/\/fedscoop.com\/bio\/hemant-baidwan\/\">Hemant Baidwan<\/a> and Deputy CISO Amanda Day. <\/p>\n<p>The reorg among IT officials comes as other leadership is changing at the department. President Donald Trump announced Thursday that Secretary of Homeland Security Kristi Noem will be leaving the position at the end of March. Trump has nominated Sen. Markwayne Mullin, R-Okla, as her replacement. <\/p>\n<p>The announcement of Noem\u2019s departure came a week after other personnel upheavals at the Cybersecurity and Infrastructure Security Agency, where acting Director Madhu Gottumukkala was reassigned to a DHS headquarters role and CIO Bob Costello resigned. <\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Baidwan will depart the organization later this month, following Day\u2019s exit at the end of February, according to two sources familiar with the situation. Day has since taken a job as vice president of cybersecurity and trust at Workday, FedScoop has independently confirmed. She has updated her <a href=\"https:\/\/www.linkedin.com\/in\/amanda-day-096a2a164\/\">LinkedIn profile<\/a> to reflect her new job. <\/p>\n<p>Both tech leaders have spent decades working for DHS. Baidwan joined the department in 2011 as governance and risk management chief and held several positions during his tenure before being appointed head of the department\u2019s information security team in April 2024, according <a href=\"https:\/\/www.linkedin.com\/in\/hbaidwan\/\">to his LinkedIn<\/a>. As CISO, Baidwan helped to develop the department\u2019s first AI cybersecurity guidelines and set new standards for technology security practices. <\/p>\n<p>Day first joined the department in 2008 as an IT specialist in information security. Most recently, she was the deputy CISO and deputy executive director at DHS since December 2024. <\/p>\n<p>Baidwan and Day did not respond to multiple requests for comment from FedScoop.<\/p>\n<p>Reached last week for comment, a Department of Homeland Security spokesperson told FedScoop: \u201cWe have no personnel changes to announce at this time.\u201d The department did not respond to follow-up requests.<\/p>\n<p class=\"has-large-font-size\"><strong>A \u201cmajor realignment\u201d at DHS<\/strong><\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>The overhaul could be part of the DHS IT shop\u2019s new normal: a version of the changing of the guard that happens when new administrations come in, particularly after the role of federal CIOs has been made more political. <\/p>\n<p>However, sources familiar with the matter believe the churn signals broader change and internal friction. Two sources described Day and Baidwan\u2019s departures to FedScoop as part of \u201ca major realignment going on across DHS at the moment\u201d that predates Noem\u2019s ouster. <\/p>\n<p>Antoine McCord, DHS\u2019s chief information officer, was described as a key player in the effort. McCord oversees IT modernization and cybersecurity across DHS and manages enterprise systems supporting border security, immigration services, disaster response, and cyber defense. <\/p>\n<p>McCord was in the <a href=\"https:\/\/fedscoop.com\/dhs-cio-antoine-mccord-homeland-security\/\">first wave of CIO hires<\/a> under the Trump administration last year as the Office of Personnel Management <a href=\"https:\/\/fedscoop.com\/opm-reclassify-chief-information-officers-career-politics\/\">reclassified the chief information officer position<\/a> from \u201ccareer reserved\u201d to \u201cgeneral.\u201d The move eased restrictions on who could get tapped for the role, FedScoop previously reported. <\/p>\n<p>\u201cInformation technology impacts virtually everything the government does, and an agency CIO therefore plays a critical role in developing policies (particularly in the digital realm) that have pervasive and significant effects on the American public,\u201d OPM said <a href=\"https:\/\/www.opm.gov\/chcoc\/transmittals\/2025\/OPM%20Memo%20Guidance%20Regarding%20Redesignating%20SES%20CIO%20Positions%202-4-2025%20FINAL.pdf\">in a memo<\/a> to heads and acting heads of agencies in Feb. 2025. \u201cThe modern CIO role is not the sort of \u2018impartial\u2019 or \u2018technical\u2019 position that is fit for career reserved SES positions.\u201d<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Two former DHS officials in close contact with the department told FedScoop the realignment is part of a broader effort to place individuals from DHS headquarters into critical CIO positions at component agencies, with the ultimate goal of subsuming them in part or in whole into the DHS CIO office. <\/p>\n<p>\u201cAntoine McCord is asserting himself as the DHS CIO with the components, and when given the opportunity, he\u2019s placing HQ people in those roles,\u201d the official said, who spoke on the condition of anonymity to speak candidly. \u201cThere are three or as high as four major components where there are DHS CIO people running those shops now. So it\u2019s clearly been a concerted effort to take advantage of departures and openings as well.\u201d<\/p>\n<p>Last year, <a href=\"https:\/\/www.dhs.gov\/news\/2025\/08\/29\/secretary-noem-terminates-inept-fema-employees-after-uncovering-massive-cyber\">Noem fired 24 FEMA IT employees<\/a>, including CIO Charley Armstrong and CISO Gregory Edwards. In February, DHS quietly named Zeke Maldonado FEMA\u2019s acting CIO. Maldonado was previously the executive director for IT operations at DHS Headquarters\u2019 management directorate. A FEMA spokesperson confirmed Maldonado\u2019s new role to FedScoop on March 1 and said he \u201cwill address previous challenges and take proactive steps to protect FEMA\u2019s networks and the homeland.\u201d<\/p>\n<p>One of the sources told FedScoop that Maldonado\u2019s appointment was also \u201cpart of a larger effort to absorb the FEMA CIO into DHS CIO.\u201d A second source concurred with that sentiment. <\/p>\n<p>\u201cThere\u2019s clear lines of interest in DHS CIO wanting to place people in there who could be useful in making that change,\u201d the first official said. <\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>A third source described the current environment at DHS as filled with \u201ctumult,\u201d with most employees \u201cjumpy\u201d from personnel changes, lack of transparency from leadership and conflicting stories about the department\u2019s decision making and goals. <\/p>\n<p>The <a href=\"https:\/\/cyberscoop.com\/cisa-cio-robert-costello-exits-agency\/\">departure<\/a> of Costello at CISA opens up another vacant CIO position at a critical component agency. Costello was a popular leader. According to sources, his ouster will likely lead to further personnel turmoil within the agency\u2019s IT shop. <\/p>\n<p>\u201cThere are people who are still there, who, now that Bob is gone, will leave,\u201d the second official told FedScoop. \u201cThe brain drain at DHS is dangerous.\u201d <\/p>\n<p>The leadership changes are surfacing as <a href=\"https:\/\/cyberscoop.com\/cisa-madhu-gottumukkala-house-homeland-hearing-workforce-staffing-levels\/\">policymakers worry about<\/a> DHS\u2019s readiness to withstand physical and cyberattacks on the U.S. as the country carries out <a href=\"https:\/\/defensescoop.com\/2026\/03\/04\/iranian-attack-drone-launches-decrease-operation-epic-fury\/\">military actions<\/a> targeting Iran. Already, the conflict has resulted in the first-ever <a href=\"https:\/\/defensescoop.com\/2026\/03\/03\/commercial-data-centers-drone-warfare-amazon-aws\/\">combat-related disruption<\/a> to a U.S.-owned hyperscale data center, DefenseScoop reported. <\/p>\n<p>\u201cThis is terrible timing, given that we are in the situation we are in the Middle East,\u201d the second official said. \u201cOur adversaries will absolutely capitalize on it.\u201d <\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"0.38624338624339\">\n<div class=\"author-card\" readability=\"7\">\n<p><h4 class=\"author-card__name\">Written by Derek B. Johnson and Lindsey Wilkinson<\/h4>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">FedScoop TV<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to FedScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/fedscoop.com\/dhs-it-leadership-overhaul-includes-ciso-deputy-ciso\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>DHS CISO, deputy CISO exit amid reported IT leadership overhaul<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[117],"tags":[119],"class_list":["post-8408","post","type-post","status-publish","format-standard","hentry","category-government","tag-government"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/government\/\" rel=\"category tag\">Government<\/a>","tag_info":"Government","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/8408","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=8408"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/8408\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=8408"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=8408"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=8408"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":8408,"date":"2026-03-06T12:00:59","date_gmt":"2026-03-06T18:00:59","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=88102"},"modified":"2026-03-06T12:00:59","modified_gmt":"2026-03-06T18:00:59","slug":"dhs-ciso-deputy-ciso-exit-amid-reported-it-leadership-overhaul","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2026\/03\/06\/dhs-ciso-deputy-ciso-exit-amid-reported-it-leadership-overhaul\/","title":{"rendered":"DHS CISO, deputy CISO exit amid reported IT leadership overhaul"},"content":{"rendered":"