Keystone Strategy E-3 Visa Sponsorship Jobs USA
Keystone Strategy sponsors E-3 visas for Australian professionals in consulting and strategy roles. The firm works with candidates in economics, data analytics, and expert witness support functions. Sponsorship activity is selective, making targeted preparation and a strong fit with Keystone's technical consulting work essential.
See All Keystone Strategy JobsOverview
Showing 5 of 6+ Keystone Strategy E-3 Visa Sponsorship Jobs USA
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all Keystone Strategy E-3 Visa Sponsorship Jobs USA
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Keystone Strategy E-3 Visa Sponsorship Jobs USA.
Get Access To All JobsINTRODUCTION
Keystone is a premier economics, technology, and strategy consulting firm built to help companies lead through transformation. As breakthrough innovations reshape industries, redefine competition and change our society, complex and highly competitive ecosystems emerge. Keystone advises technology leaders, Fortune 100 companies, their legal counsel, and governments on business, economic, litigation, and regulatory strategy in relation to these innovations and competitive eco-systems. We operate globally from offices in New York, Boston, San Francisco, Seattle, London, Dubai, and Washington, D.C.
ABOUT THE SECURITY ENGINEER – GRC ROLE
We’re growing quickly and looking for a Security Engineer with governance, risk and compliance (GRC) proficiency who will be responsible for strengthening the organization’s cybersecurity posture through the execution of governance, risk management, and compliance activities. This role will be building and maintaining structured governance by formalizing policies, controls, and accountability across the organization, enabling proactive risk management through continuous assessment, threat modeling, and mitigation strategies, and ensuring compliance efforts can scale effectively alongside company growth, evolving regulatory requirements, and increasing complexity in systems, data handling, and third-party relationships.
Reporting to the Director, IT Security you will work cross-functionally with IT, product, compliance, and leadership team, and in some cases directly with clients or auditor, to ensure our security posture meets both technical and regulatory expectations across commercial and regulated environments. This role focuses on developing, documenting, and refining security standards and procedures; performing risk and control assessments; and ensuring alignment with government regulatory and security frameworks, including ISO, industry standards, and organizational policies. This role is ideal for a technically strong security professional who enjoys building secure systems and translating regulatory and business requirements into practical, scalable security solutions.
KEY RESPONSIBILITIES
Security Engineering & Technical Controls
- Design, implement, and maintain security controls across cloud and SaaS environments (AWS, Azure, GCP)
- Implement and manage IAM solutions (SSO, MFA, RBAC, least privilege)
- Support vulnerability management, secure configuration, and system hardening initiatives
- Support logging, monitoring, and alerting integrations (SIEM, cloud-native tools)
- Assist with incident response planning, tabletop exercises, and post-incident reviews
- Evaluate and implement security tooling to improve visibility, protection, and automation
- Partner with engineering teams to embed security into the SDLC (secure design reviews, threat modeling, security requirements)
Governance, Risk & Compliance (GRC)
- Enforce and maintain cybersecurity governance, risk, and control frameworks aligned with applicable laws and industry standards
- Perform cybersecurity risk assessments, maturity assessments, and Business Impact Analyses (BIA)
- Conduct control readiness and effectiveness assessments
- Maintain risk registers, POA&Ms, and remediation timelines
- Serve as a trusted advisor on control design, risk treatment, and security architecture decisions
Regulatory & Audit Support
- Support compliance initiatives such as FedRAMP Moderate/High, ISO 27001, and similar frameworks
- Develop and maintain compliance documentation, including:
- System Security Plans (SSPs)
- Policies, procedures, and SOPs
- Control implementation statements
- Coordinate evidence collection and technical validation for internal and external audits
- Work directly with auditors, 3PAOs, and internal stakeholders during assessments
- Support continuous monitoring activities (vulnerability scans, control testing, compliance reporting)
Program Execution & Improvement
- Track security control implementation with leadership and IT teams
- Drive automation and tooling improvements to scale compliance and monitoring
- Support third-party risk management, including technical vendor assessments and questionnaires
- Research and apply evolving security standards, regulatory requirements, and threat trends
- Lead process improvements to enhance security efficiency and operational maturity
WHAT YOU’LL BRING
Required
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent practical experience
- 5–8+ years of experience in security engineering, GRC, or hybrid security/IT roles
- Strong hands-on experience with:
- Cloud platforms (AWS, Azure, GCP)
- IAM, network security, encryption, and secure system design
- Vulnerability management and secure configuration
- Strong working knowledge of security frameworks and compliance standards:
- NIST SP 800-53 (Rev. 5), NIST RMF (800-37), NIST CSF
- FedRAMP Moderate/High (including SSPs, POA&Ms, and audits)
- ISO 27001, CIS
- Experience translating compliance requirements into technical implementations
- Excellent technical writing, documentation, and stakeholder communication skills
- Ability to operate independently, manage multiple initiatives, and influence without authority
Preferred
- Experience with FedRAMP 20x, GovRAMP, CMMC, TX-RAMP, or HIPAA
- Familiarity with GRC platforms (JupiterOne or similar)
- Experience with SIEM, WAF, CSPM, CNAPP, and vulnerability scanning tools
- Background in incident response, threat modeling, or penetration testing
- Scripting or automation experience (Python, Bash, Terraform)
- Cybersecurity certifications such as CISSP, CISA, CRISC, CCSP, Security+
COMPENSATION
- Annual Salary Range: $110,000—$150,000 USD
In addition to annual salary, we provide an annual discretionary bonus, 401k contribution, and competitive benefits package. Actual Compensation within the range will depend upon the level the individual is hired into based on their skills, experience, and qualifications.
At Keystone we believe diversity matters. At every level of our firm, we seek to advance and promote diversity, foster an inclusive culture, and ensure our colleagues have a deep sense of respect and belonging. If you are interested in growing your career with colleagues from varied backgrounds and cultures, consider Keystone.
INTRODUCTION
Keystone is a premier economics, technology, and strategy consulting firm built to help companies lead through transformation. As breakthrough innovations reshape industries, redefine competition and change our society, complex and highly competitive ecosystems emerge. Keystone advises technology leaders, Fortune 100 companies, their legal counsel, and governments on business, economic, litigation, and regulatory strategy in relation to these innovations and competitive eco-systems. We operate globally from offices in New York, Boston, San Francisco, Seattle, London, Dubai, and Washington, D.C.
ABOUT THE SECURITY ENGINEER – GRC ROLE
We’re growing quickly and looking for a Security Engineer with governance, risk and compliance (GRC) proficiency who will be responsible for strengthening the organization’s cybersecurity posture through the execution of governance, risk management, and compliance activities. This role will be building and maintaining structured governance by formalizing policies, controls, and accountability across the organization, enabling proactive risk management through continuous assessment, threat modeling, and mitigation strategies, and ensuring compliance efforts can scale effectively alongside company growth, evolving regulatory requirements, and increasing complexity in systems, data handling, and third-party relationships.
Reporting to the Director, IT Security you will work cross-functionally with IT, product, compliance, and leadership team, and in some cases directly with clients or auditor, to ensure our security posture meets both technical and regulatory expectations across commercial and regulated environments. This role focuses on developing, documenting, and refining security standards and procedures; performing risk and control assessments; and ensuring alignment with government regulatory and security frameworks, including ISO, industry standards, and organizational policies. This role is ideal for a technically strong security professional who enjoys building secure systems and translating regulatory and business requirements into practical, scalable security solutions.
KEY RESPONSIBILITIES
Security Engineering & Technical Controls
- Design, implement, and maintain security controls across cloud and SaaS environments (AWS, Azure, GCP)
- Implement and manage IAM solutions (SSO, MFA, RBAC, least privilege)
- Support vulnerability management, secure configuration, and system hardening initiatives
- Support logging, monitoring, and alerting integrations (SIEM, cloud-native tools)
- Assist with incident response planning, tabletop exercises, and post-incident reviews
- Evaluate and implement security tooling to improve visibility, protection, and automation
- Partner with engineering teams to embed security into the SDLC (secure design reviews, threat modeling, security requirements)
Governance, Risk & Compliance (GRC)
- Enforce and maintain cybersecurity governance, risk, and control frameworks aligned with applicable laws and industry standards
- Perform cybersecurity risk assessments, maturity assessments, and Business Impact Analyses (BIA)
- Conduct control readiness and effectiveness assessments
- Maintain risk registers, POA&Ms, and remediation timelines
- Serve as a trusted advisor on control design, risk treatment, and security architecture decisions
Regulatory & Audit Support
- Support compliance initiatives such as FedRAMP Moderate/High, ISO 27001, and similar frameworks
- Develop and maintain compliance documentation, including:
- System Security Plans (SSPs)
- Policies, procedures, and SOPs
- Control implementation statements
- Coordinate evidence collection and technical validation for internal and external audits
- Work directly with auditors, 3PAOs, and internal stakeholders during assessments
- Support continuous monitoring activities (vulnerability scans, control testing, compliance reporting)
Program Execution & Improvement
- Track security control implementation with leadership and IT teams
- Drive automation and tooling improvements to scale compliance and monitoring
- Support third-party risk management, including technical vendor assessments and questionnaires
- Research and apply evolving security standards, regulatory requirements, and threat trends
- Lead process improvements to enhance security efficiency and operational maturity
WHAT YOU’LL BRING
Required
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent practical experience
- 5–8+ years of experience in security engineering, GRC, or hybrid security/IT roles
- Strong hands-on experience with:
- Cloud platforms (AWS, Azure, GCP)
- IAM, network security, encryption, and secure system design
- Vulnerability management and secure configuration
- Strong working knowledge of security frameworks and compliance standards:
- NIST SP 800-53 (Rev. 5), NIST RMF (800-37), NIST CSF
- FedRAMP Moderate/High (including SSPs, POA&Ms, and audits)
- ISO 27001, CIS
- Experience translating compliance requirements into technical implementations
- Excellent technical writing, documentation, and stakeholder communication skills
- Ability to operate independently, manage multiple initiatives, and influence without authority
Preferred
- Experience with FedRAMP 20x, GovRAMP, CMMC, TX-RAMP, or HIPAA
- Familiarity with GRC platforms (JupiterOne or similar)
- Experience with SIEM, WAF, CSPM, CNAPP, and vulnerability scanning tools
- Background in incident response, threat modeling, or penetration testing
- Scripting or automation experience (Python, Bash, Terraform)
- Cybersecurity certifications such as CISSP, CISA, CRISC, CCSP, Security+
COMPENSATION
- Annual Salary Range: $110,000—$150,000 USD
In addition to annual salary, we provide an annual discretionary bonus, 401k contribution, and competitive benefits package. Actual Compensation within the range will depend upon the level the individual is hired into based on their skills, experience, and qualifications.
At Keystone we believe diversity matters. At every level of our firm, we seek to advance and promote diversity, foster an inclusive culture, and ensure our colleagues have a deep sense of respect and belonging. If you are interested in growing your career with colleagues from varied backgrounds and cultures, consider Keystone.
Job Roles at Keystone Strategy
See all Keystone Strategy Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Keystone Strategy roles.
Get Access To All JobsTips for Finding Keystone Strategy E-3 Visa Sponsorship Jobs USA
Frame your degree for specialty occupation
Keystone Strategy's consulting work sits at the intersection of economics, business strategy, and quantitative analysis. Map your degree field directly to the role's analytical requirements so the specialty occupation threshold is clear to the hiring team from the first conversation.
Target teams doing expert witness work
Keystone's litigation support and expert witness practices draw heavily on economics and finance credentials. If your background is in applied economics or econometrics, prioritize those practice areas when applying, they align tightly with E-3 specialty occupation requirements.
Confirm E-3 willingness before final-round interviews
Keystone Strategy sponsors across multiple visa types, so not every recruiter will lead with E-3 details. Ask directly whether the team has handled E-3 filings before advancing to offer negotiations, it saves time for both sides.
Verify your prevailing wage tier early
Use the OFLC Wage Search to look up the prevailing wage for your target role and location before negotiating an offer. Keystone's consulting salaries tend to be competitive, but confirming the DOL wage level for your specific SOC code protects your application from an LCA challenge.
Check your role against O*NET before applying
Pull the O*NET occupation profile for the role you're targeting at Keystone Strategy. Confirm the job zone is four or five and that a specific degree field is listed as required, not just preferred, so your application packet reflects the specialty occupation standard accurately.
Use Migrate Mate to manage your filing after the offer
Once Keystone Strategy extends an E-3 offer, use Migrate Mate to handle the petition paperwork. Migrate Mate's flat-fee service assigns a dedicated E-3 expert to your case, keeping the process straightforward so you can focus on your start date.
Keystone Strategy E-3 Visa Sponsorship: Frequently Asked Questions
Does Keystone Strategy sponsor E-3 visas?
Yes, Keystone Strategy sponsors E-3 visas. The firm works with Australian professionals in consulting, economics, and quantitative analysis roles. Sponsorship is tied to specific hiring needs rather than being offered broadly across all positions, so confirming E-3 availability with the recruiter early in the process is a practical first step.
Which roles at Keystone Strategy typically qualify for E-3 sponsorship?
Roles in economic consulting, data analytics, litigation support, and strategy advisory are the most natural fits for E-3 sponsorship at Keystone Strategy. These positions require a degree in a directly related field, which satisfies the specialty occupation requirement that USCIS uses to evaluate E-3 petitions.
How do I start the E-3 application process at Keystone Strategy?
After receiving an offer, Keystone Strategy's HR or legal team files a Labor Condition Application with the DOL. Once that's certified, you take it along with your offer letter and supporting documents to your U.S. consulate in Australia for the visa interview. Migrate Mate can manage the petition paperwork on your behalf if you want a dedicated expert handling the filing.
How long does the E-3 sponsorship process take at Keystone Strategy?
The LCA certification through the DOL typically takes around seven business days. After that, consulate appointment wait times in Australia determine the overall timeline. Sydney, Melbourne, and Perth process E-3 applications, and current appointment availability varies by location, so checking wait times early gives you a realistic picture of your start date.
What should I bring to a Keystone Strategy interview to strengthen my E-3 case?
Bring documentation that connects your degree field directly to the role's responsibilities. For consulting positions at Keystone Strategy, that means transcripts showing coursework in economics, finance, or a quantitative discipline, plus any professional certifications relevant to the practice area. Having this ready before the offer stage keeps the LCA filing process moving without delays.
What is the prevailing wage for E-3 sponsorship at Keystone Strategy?
E-3 employers must pay at least the prevailing wage, determined when they file a Labor Condition Application with the Department of Labor. The rate is based on the role, location, and experience level, ensuring Australian hires are paid comparably to U.S. workers in the same position. You can look up prevailing wage rates for any occupation and location using the DOL's OFLC Wage Search tool.