Tabitha Craig

As of March 2025, Tabitha Craig is the Chief Information Security Officer of the Congressional Budget Office, appointed in January 2025.

Career path

Craig joined CBO in January 2025, reporting to the Chief Information Officer and leading the agency's cybersecurity program, including developing and enforcing strategies and policies, managing risk and vulnerabilities, ensuring compliance, and overseeing incident response. She advises CBO's senior leadership and the CIO on the security of information technology functions, programs, and initiatives, from strategic and capital planning to day-to-day operations. SecurityWeek's industry-moves coverage reported her appointment as CISO of CBO, noting her previous leadership roles at the Department of Defense and the Department of Housing and Urban Development. Before joining CBO, Craig served as Director of Operations Security at the Department of Housing and Urban Development, where she advised on security strategy, risk management, and compliance, and directed programs such as the department's CDM DEFEND E initiative. At HUD she also served as Enterprise Vulnerability Program Manager, a role in which she ensured compliance with federal security mandates. Before her civilian government work, Craig served in the Army, from which she retired in 2022; at her last duty station in Washington, D.C., she supported the readiness and training of commissioned and noncommissioned officers.

Education and credentials

Craig holds an M.S. in information management technology from George Washington University, along with a CIO certificate from GWU. Her professional credentials include Certified Information Security Manager from ISACA and CompTIA Security+ CE.

CBO's organization chart lists Craig as Chief Information Security Officer within the Office of the Chief Information Officer, alongside the agency's information security engineering and systems engineering staff.