E-3 Visa Cybersecurity Manager Jobs
Cybersecurity Manager roles qualify for E-3 visa sponsorship as specialty occupations requiring at least a bachelor's degree in information security, computer science, or a related field. The E-3 has no lottery and no annual cap, making it one of the most reliable paths for Australian professionals pursuing U.S. security leadership roles.
Find E-3 Visa Cybersecurity Manager JobsOverview
Showing 5 of 459+ Cybersecurity Manager jobs
See all 459+ Cybersecurity Manager Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cybersecurity Manager roles.
Get Access To All JobsResponsibilities
About the Team
TikTok is seeking a GRC Cybersecurity Controls Analyst to join the TikTok USDS Joint Venture (JV) GRC Controls & Certifications team. This role will support the operation, testing, and continuous improvement of the controls framework and will help drive audit readiness across key security, compliance, privacy, and regulatory obligations. The candidate will work closely with control owners, product teams, security teams, privacy, legal, internal audit, external auditors, and GRC leadership to evaluate control design, implementation, and operating effectiveness.
About the Role
The role will support control testing, evidence review, audit response coordination, control narrative development, and issue identification across frameworks and obligations such as ISO 27001, SOC 2, NIST CSF, PCI, control validation, and other certification or assessment activities. The candidate will also help mature the teamâs approach to GRC automation and engineering. This includes improving how controls are mapped, tested, monitored, and reported through tooling, dashboards, structured data, workflow automation, evidence recommendations, and scalable testing. The ideal candidate is comfortable working at the intersection of GRC, security controls, audit readiness, and process automation.
Key responsibilities include:
- Support the maintenance and continuous improvement of the controls framework, including control descriptions, mappings, owners, evidence expectations, testing procedures, and control narratives.
- Perform control testing and validation activities, including design, implementation, and operating effectiveness testing.
- Review evidence submitted by control owners and product teams to determine whether it sufficiently demonstrates control performance and meets audit or assessment expectations.
- Coordinate with control owners, evidence owners, product teams, and GRC stakeholders to resolve evidence gaps, clarify control intent, and improve testing quality.
- Support internal and external audits, certifications, and assessments, including ISO 27001, SOC 2, PCI, NIST CSF, and other GRC obligations.
- Support GRC automation initiatives by helping define requirements for workflow automation, control monitoring, and scalable control testing processes.
- Work with technical and engineering teams to understand security tools, data sources, system-generated evidence, and opportunities to automate or improve control validation.
- Contribute to a culture of high-quality documentation, defensible controls testing, and continuous improvement across the Controls & Certifications function.
Qualifications
Minimum Qualifications
- Bachelorâs degree in Information Security, Cybersecurity, Information Technology, Risk Management, Compliance, Engineering, Data Analytics, or a related discipline, or equivalent practical experience.
- 3+ years of experience in GRC, IT risk, security controls, audit readiness, control testing, compliance, security assurance, or a related field. Experience performing or supporting control testing, including evaluating control design, implementation, and operating effectiveness.
- Experience gathering, reviewing, and assessing technical control evidence from stakeholders, systems, tools, dashboards, or documentation repositories. Working knowledge of security and compliance frameworks such as ISO 27001, NIST CSF, SOC 2, PCI-DSS, or similar control frameworks.
- Familiarity with security domains such as Identity and Access Management, Vulnerability Management, Incident Management, Asset Management, Logging and Monitoring, Data Security, SDLC, Third-Party Risk Management, Business Continuity / Disaster Recovery, or Privacy.
- Strong writing and documentation skills, with the ability to create clear control narratives, evidence and testing summaries, and status updates. Strong analytical skills and ability to assess whether evidence meets the intent of a control, requirement, or audit request.
- Experience working with control owners, technical teams, auditors, legal, privacy, compliance, or cross-functional stakeholders. Ability to manage multiple workstreams, follow up on open items, identify blockers, and communicate risks clearly. Demonstrated teamwork and collaboration skills, especially in fast-moving, cross-functional environments.
Preferred Qualifications
- Professional certification such as CISA, CISSP, CISM, CRISC, CDPSE, ISO 27001 Lead Auditor / Lead Implementer, or equivalent.
- Experience supporting external audits, security certifications, or regulatory assessments such as SOC 2, ISO 27001, PCI, NIST CSF, or national security / data protection obligations.
- Experience with GRC automation, control monitoring, evidence automation, dashboarding, workflow design, or data-driven control testing. Experience working with engineering, security, infrastructure, product, or data teams to translate technical processes into control evidence and audit-ready narratives.
- Familiarity with automation, scripting, SQL, APIs, or data workflows used to improve GRC operations.
- Experience maintaining or improving a control library, control framework, control mapping, or integrated compliance framework. Experience identifying evidence quality issues, control design gaps, operating effectiveness concerns, or audit readiness risks.
About USDS
TikTok USDS Joint Venture LLC is dedicated to the safety and security of millions of Americans who create, discover, and connect with what they love on the apps we operate. The Joint Venture has been established in compliance with the Executive Order signed by President Trump on September 25, 2025. Our foundation is a comprehensive data privacy and cybersecurity program we operate under defined safeguards to protect national security and secure U.S. user data, apps and the algorithm. We safeguard the U.S. content ecosystem, holding decision-making authority for trust and safety policies and moderation. USDS Joint Venture helps ensure Americans can continue to express their creativity, discover new hobbies and interests, and build thriving communities and businesses on a global scale.
On-site presence across teams allows the company to operate with greater speed, alignment, and agility â especially in areas like real-time decision-making, team development, and integrated execution. As such, the company is shifting from a hybrid work model to a fully in-person schedule up to 5 days a week.
Why Join Us
Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect â and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy â a mission we work towards every day.
We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.
Diversity & Inclusion
TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.
USDS Reasonable Accommodation
USDS is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/USDS-RA
Job Information
ăFor Pay TransparencyăCompensation Description (Annually) The base salary range for this position in the selected city is $98800 - $196000 annually. Compensation may vary outside of this range depending on a number of factors, including a candidateâs qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.
Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).
The Company reserves the right to modify or change these benefits programs at any time, with or without notice.
For Los Angeles County (unincorporated) Candidates:
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:
1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;
2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and
3. Exercising sound judgment.
Responsibilities
About the Team
TikTok is seeking a GRC Cybersecurity Controls Analyst to join the TikTok USDS Joint Venture (JV) GRC Controls & Certifications team. This role will support the operation, testing, and continuous improvement of the controls framework and will help drive audit readiness across key security, compliance, privacy, and regulatory obligations. The candidate will work closely with control owners, product teams, security teams, privacy, legal, internal audit, external auditors, and GRC leadership to evaluate control design, implementation, and operating effectiveness.
About the Role
The role will support control testing, evidence review, audit response coordination, control narrative development, and issue identification across frameworks and obligations such as ISO 27001, SOC 2, NIST CSF, PCI, control validation, and other certification or assessment activities. The candidate will also help mature the teamâs approach to GRC automation and engineering. This includes improving how controls are mapped, tested, monitored, and reported through tooling, dashboards, structured data, workflow automation, evidence recommendations, and scalable testing. The ideal candidate is comfortable working at the intersection of GRC, security controls, audit readiness, and process automation.
Key responsibilities include:
- Support the maintenance and continuous improvement of the controls framework, including control descriptions, mappings, owners, evidence expectations, testing procedures, and control narratives.
- Perform control testing and validation activities, including design, implementation, and operating effectiveness testing.
- Review evidence submitted by control owners and product teams to determine whether it sufficiently demonstrates control performance and meets audit or assessment expectations.
- Coordinate with control owners, evidence owners, product teams, and GRC stakeholders to resolve evidence gaps, clarify control intent, and improve testing quality.
- Support internal and external audits, certifications, and assessments, including ISO 27001, SOC 2, PCI, NIST CSF, and other GRC obligations.
- Support GRC automation initiatives by helping define requirements for workflow automation, control monitoring, and scalable control testing processes.
- Work with technical and engineering teams to understand security tools, data sources, system-generated evidence, and opportunities to automate or improve control validation.
- Contribute to a culture of high-quality documentation, defensible controls testing, and continuous improvement across the Controls & Certifications function.
Qualifications
Minimum Qualifications
- Bachelorâs degree in Information Security, Cybersecurity, Information Technology, Risk Management, Compliance, Engineering, Data Analytics, or a related discipline, or equivalent practical experience.
- 3+ years of experience in GRC, IT risk, security controls, audit readiness, control testing, compliance, security assurance, or a related field. Experience performing or supporting control testing, including evaluating control design, implementation, and operating effectiveness.
- Experience gathering, reviewing, and assessing technical control evidence from stakeholders, systems, tools, dashboards, or documentation repositories. Working knowledge of security and compliance frameworks such as ISO 27001, NIST CSF, SOC 2, PCI-DSS, or similar control frameworks.
- Familiarity with security domains such as Identity and Access Management, Vulnerability Management, Incident Management, Asset Management, Logging and Monitoring, Data Security, SDLC, Third-Party Risk Management, Business Continuity / Disaster Recovery, or Privacy.
- Strong writing and documentation skills, with the ability to create clear control narratives, evidence and testing summaries, and status updates. Strong analytical skills and ability to assess whether evidence meets the intent of a control, requirement, or audit request.
- Experience working with control owners, technical teams, auditors, legal, privacy, compliance, or cross-functional stakeholders. Ability to manage multiple workstreams, follow up on open items, identify blockers, and communicate risks clearly. Demonstrated teamwork and collaboration skills, especially in fast-moving, cross-functional environments.
Preferred Qualifications
- Professional certification such as CISA, CISSP, CISM, CRISC, CDPSE, ISO 27001 Lead Auditor / Lead Implementer, or equivalent.
- Experience supporting external audits, security certifications, or regulatory assessments such as SOC 2, ISO 27001, PCI, NIST CSF, or national security / data protection obligations.
- Experience with GRC automation, control monitoring, evidence automation, dashboarding, workflow design, or data-driven control testing. Experience working with engineering, security, infrastructure, product, or data teams to translate technical processes into control evidence and audit-ready narratives.
- Familiarity with automation, scripting, SQL, APIs, or data workflows used to improve GRC operations.
- Experience maintaining or improving a control library, control framework, control mapping, or integrated compliance framework. Experience identifying evidence quality issues, control design gaps, operating effectiveness concerns, or audit readiness risks.
About USDS
TikTok USDS Joint Venture LLC is dedicated to the safety and security of millions of Americans who create, discover, and connect with what they love on the apps we operate. The Joint Venture has been established in compliance with the Executive Order signed by President Trump on September 25, 2025. Our foundation is a comprehensive data privacy and cybersecurity program we operate under defined safeguards to protect national security and secure U.S. user data, apps and the algorithm. We safeguard the U.S. content ecosystem, holding decision-making authority for trust and safety policies and moderation. USDS Joint Venture helps ensure Americans can continue to express their creativity, discover new hobbies and interests, and build thriving communities and businesses on a global scale.
On-site presence across teams allows the company to operate with greater speed, alignment, and agility â especially in areas like real-time decision-making, team development, and integrated execution. As such, the company is shifting from a hybrid work model to a fully in-person schedule up to 5 days a week.
Why Join Us
Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect â and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy â a mission we work towards every day.
We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.
Diversity & Inclusion
TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.
USDS Reasonable Accommodation
USDS is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/USDS-RA
Job Information
ăFor Pay TransparencyăCompensation Description (Annually) The base salary range for this position in the selected city is $98800 - $196000 annually. Compensation may vary outside of this range depending on a number of factors, including a candidateâs qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.
Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).
The Company reserves the right to modify or change these benefits programs at any time, with or without notice.
For Los Angeles County (unincorporated) Candidates:
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:
1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;
2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and
3. Exercising sound judgment.
See all 459+ E-3 Visa Cybersecurity Manager Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new E-3 Visa Cybersecurity Manager Jobs.
Get Access To All JobsTips for Finding E-3 Visa Sponsorship as a Cybersecurity Manager
Frame your credentials for U.S. specialty occupation standards
Australian three-year bachelor's degrees are generally accepted as equivalent to U.S. four-year degrees for E-3 visa purposes. Get a credential evaluation from a NACES-approved service before your job search so employers can confirm specialty occupation eligibility without delays.
Target employers with active federal security contracts
U.S. federal contractors and cloud infrastructure companies routinely sponsor cybersecurity leadership roles because security clearance pipelines require stable, long-term hires. These employers understand the E-3 process and are less likely to hesitate when you raise sponsorship in early conversations.
Search Migrate Mate for verified E-3 sponsorship roles
Migrate Mate filters Cybersecurity Manager jobs by confirmed E-3 sponsorship history, so you're not cold-applying to employers unfamiliar with the visa. Use it to identify companies that have filed LCAs for security management roles before.
Clarify the LCA timeline when you receive an offer
Your employer files the Labor Condition Application with the DOL before your consulate appointment. The DOL certifies most LCAs within seven business days. Tell your hiring manager this upfront so start-date negotiations account for that window, not weeks of uncertainty.
Use Migrate Mate's E-3 filing service to handle LCA and consulate prep
Cybersecurity Manager LCAs require accurate prevailing wage documentation under DOL rules. Migrate Mate's E-3 filing service manages the entire process from LCA submission through consulate appointment, reducing the risk of wage compliance errors that can delay or void certification.
Negotiate E-3 renewal timing into your employment agreement
E-3 visas are granted in two-year increments with no renewal cap, but your employer must re-file the LCA each renewal cycle. Confirm before signing that your employer will support renewals, and get the commitment documented in your offer letter or employment contract.
E-3 Visa Cybersecurity Manager: Frequently Asked Questions
How do I find Cybersecurity Manager jobs that offer E-3 visa sponsorship?
Migrate Mate is built specifically for this search. It surfaces Cybersecurity Manager roles from employers with documented E-3 and LCA filing history, so you can target companies already familiar with Australian visa sponsorship rather than educating every recruiter from scratch. Filter by role, location, and sponsorship status to build a focused target list.
How much does it cost to get an E-3 visa?
Migrate Mate's E-3 filing service covers the entire process for $499, including the Labor Condition Application, visa document preparation, and consulate appointment guidance. Traditional immigration lawyers charge $2,000â$5,000+ for the same work. The E-3 has less paperwork than most work visas, so paying thousands for legal help is usually unnecessary.
Does a Cybersecurity Manager role qualify as a specialty occupation for the E-3?
Yes. Cybersecurity Manager positions typically require a bachelor's degree or higher in information security, computer science, or a closely related field, which satisfies the E-3 specialty occupation definition. Roles that blend general management with security leadership still qualify as long as the job duties are tied to a specific technical discipline and the degree requirement is genuine, not a preference.
How does the E-3 compare to the H-1B for Cybersecurity Manager roles?
The E-3 has no lottery and no annual numerical cap, unlike the H-1B visa which is subject to an oversubscribed random selection process. For Australian cybersecurity professionals, this means you can apply any time of year once you have a job offer and a certified LCA. The E-3 also has no limit on renewals, making it a more predictable long-term arrangement for both you and your employer.
What happens to my E-3 status if I change employers or get promoted to a different role?
Changing employers requires a new LCA filing and a new E-3 visa stamp before you start with the new company. An internal promotion to a materially different role, such as moving from Cybersecurity Manager to CISO, may also require a new LCA to reflect the updated job duties and prevailing wage level. Your existing E-3 does not automatically transfer, so plan for a processing window before any transition.