Green Card Chief Information Security Officer Jobs
Chief Information Security Officer roles qualify for EB-2 or EB-3 green card sponsorship through the PERM labor certification process, which requires employers to demonstrate no qualified U.S. workers are available. Because CISO positions typically demand an advanced degree or substantial progressive experience in cybersecurity, most sponsoring employers pursue EB-2 classification.
Find Green Card Chief Information Security Officer JobsOverview
Showing 5 of 9+ Chief Information Security Officer jobs
See all Chief Information Security Officer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Chief Information Security Officer roles.
Get Access To All JobsJob Posting:
JR102302 Chief Information Security Officer (Open)
Department:
UBalt OTS Staff Inst Support Admin, PM
Position Type:
Regular
Open Date:
11-09-2026
Close Date:
$135,000 - $160,000
Job Description:
Reporting to the Deputy CIO (DCIO), the Chief Information Security Officer (CISO) is a senior-level technical leader responsible for administering and managing UBalt’s information security architecture, strategy, policies, programs, and practices. The CISO's primary role is to ensure the confidentiality, integrity, and availability of information assets and to protect these assets from various cyber threats and risks. This position and program contribute to the mission of the University by maintaining the integrity of campus technology resources, appropriate protection of information, identification and mitigation of technology and information-related risks and driving compliance with University System of Maryland (USM), state and federal requirements. The CISO is responsible for a range of activities including policy and standards development, security assessments, incident response, awareness training program, log management and monitoring, audit coordination, and oversight of intrusion detection and prevention systems. This position provides analysis, serves as a consultant, and takes an active role in overall technology change management and procurement.
This is a hybrid position that requires on-campus work at least one day per week, with the option to telework up to four days per week. Additional on-campus presence may be required periodically during the academic year to support university activities and operational needs.
Responsibilities:
Information Security Program: Oversees, administers and improves the University’s overall information security program in support of the appropriate confidentiality, integrity, and availability of information and technology systems.
- Monitors security trends and advocates for security practices, policies and technology.
- Facilitates the selection and implementation of information security solutions including, but not limited to, anti-virus, anti-malware, firewalls, virtual private network (VPN), intrusion prevention system (IPS) and security information and event management (SIEM).
- Participates in the selection of IT infrastructure and software; develops and specifies security requirements.
- Leads the University’s privacy initiative, maintaining compliance with USM standards and guidelines.
- Performs ongoing analysis and correlation of information collected by IPS and SIEM systems; responsible for the ongoing maintenance and support of these systems.
- Verifies completion of ongoing maintenance and support of SIEM and IPS systems.
- Leads the security incident response team.
- Investigates incidents that are detected or reported.
- Reports issues to OTS leadership, or other personnel, as appropriate.
- Develops and reviews automated reports to achieve compliance with USM policies, state, federal and audit requirements.
- Reviews security advisories, assessing relevance and risk, and disseminates to relevant technical staff.
- Prepares an annual IT security program update for the Chief Information Officer (CIO). Reviews update with the CIO for presentation to the President.
Audits and Assessments: Acts as the primary point of contact for all IT-related audits in support of consistent, efficient and effective audit activities and overall staff accountability.
- Provides support and oversight for all technology audits of all campus units.
- Serves as project manager on all internal audits involving OTS.
- Tracks resolution of audit findings, providing periodic status updates to CIO.
- Conducts required network and server vulnerability assessments.
- Conducts routine audits of the network infrastructure configuration to ensure security best practices are being utilized.
- Tracks security vulnerabilities and remediation activities; holds employees and leaders accountable for timely resolution.
- Partners with Chief IT Architect to perform vendor security assessments.
- Provides leadership, direction, and continual improvement of a personally identifiable information (PII) monitoring program.
Architecture, Policy, Standard, Guideline and Procedure Development: Oversees the development and maintenance of a comprehensive information security policy framework.
- Identifies needs in the policy framework and proposes associated efforts to the DCIO and CIO.
- Serves as a key developer of information security policies, standards, guidelines, and procedures.
- Work with the Chief IT Architect to develop and document security architecture and standards.
- Periodically reviews elements of the existing policy framework for needed updates.
- Monitors USM policies and State of Maryland legislation for framework requirements.
- Active member of the USM Privacy and Security Councils.
Documentation and Cross Training: Develops and maintains documentation in support of a sustainable and auditable security program.
- Develops and maintains documentation for all aspects of the information security program and infrastructure.
- Reviews security-related documentation of other technology units and makes recommendations for necessary improvements.
- Provides periodic training to staff members serving with backup responsibilities for information security activities.
- Develops, implements and maintains an ongoing IT security awareness program.
- Works with the Office of Human Resources to ensure that faculty, staff, and students are provided with appropriate security training.
Change Management and Project Consulting: Participates in technology change management and on project teams providing comprehensive analysis in support of successful changes and fully developed project requirements and plans.
- Serves on the technology Change Control Board (CCB).
- Participates in project evaluation teams so that security is part of the system development life cycle (SDLC).
Minimum Qualifications:
Education:
Bachelor's degree in Computer Science, Information Technology Engineering, or related field/discipline.
Experience:
- 7 years of IT experience to include:
- 5 years of experience in information security administration and production support in a distributed networking environment
- Required familiarity with major information security tools
- Experience with risk and vulnerability assessment and penetration testing
- Experience working and interacting with technical teams
- CISSP Certification
Preferred Qualifications:
Education: Graduate degree in Computer Science, Information Technology Engineering, or related field.
Experience:
- 10 years of progressively responsible experience in information security administration and enterprise production support
- 3 years of experience in higher education
- Experience with State of Maryland and USM audit processes
Special Hours of Work Required:
Ability to provide 24/7 security incident support as needed is required. Occasional Friday night work may be required to support the established campus technology maintenance period.
Required Knowledge, Skills and Abilities
Analytical Skills
- Ability to perform development and systems analysis including identifying security threats and impact for applications and technology infrastructure used by UBalt.
- Ability to gather, compile and analyze data to make practical recommendations at the tactical level to leadership.
- Experience conducting security analysis, including elements such as:
- Potential security threats to UBalt
- Documenting information security processes
- Developing and assessing business cases for change
- Measuring the impact of security improvements
- Participating in change management processes
Interpersonal
- Flexible, adaptable and able to sustain momentum, effectiveness and enthusiastic demeanor while conditions and organizational structures may be fluid.
- Good interpersonal skills and experience working with multiple internal and external constituencies; able to gain community respect and possesses good relationship building skills.
- Good communication capabilities, including giving presentations, and speaking publicly.
- Ability to translate complex security concepts into easily understandable terms.
- Ability to work well with functional and technical teams and staff at all levels of the organization.
- Demonstrated ability to communicate clearly, concisely and accurately with people, verbally and in writing.
Technical
Infrastructure Hardware and Software:
- Intrusion detection and prevention
- Security incident and event management
- Virtual private networking
- Encryption technology
- Firewalls
- Networks and related components
- Cisco IOS
- Application gateways and load balancers
- Network scanning tools such as Nessus
- Encryption technology
- Communications technology
- Wireless networking
- 802.1x
- Data storage
- Microsoft Windows desktop and server operating systems
- Microsoft SQL Server
- Microsoft Exchange
- Microsoft Office365 security and compliance
- Linux
- Apple desktop and mobile operating systems
- Android operating system
- Microsoft Azure
- Amazon Web Services
- Active Directory and Azure Active Directory
- SAML
- DHCP
- DNS
- LDAP
- SSH
- SMTP
- FTP
- SMB
- CIFS
- NFS
- RDP
- Antivirus
- Terminal Server
We offer a competitive benefits package, including health, life, prescription, and dental plans, tuition remission benefits, paid leave (22 days of annual, 15 days of sick, 3 days of personal, and 14-15 holidays) and retirement plans with employer contributions.
Additional Job Information:
The University of Baltimore ("UBalt" or "University") does not discriminate on the basis of sex, gender, race, religion, age, disability, national origin, ethnicity, sexual orientation, gender identity, or other legally protected characteristics in its programs, activities or employment practices. UBalt is an Equal Opportunity/ADA Compliant Employer & Title IX Institution.
About Us
Leaders learn here.
We’ve been educating leaders for nearly 100 years; you know us through our faculty’s outstanding research and teaching; you know us thanks to the hard work and dedication of our alumni, students and staff. You know us because we are The University of Baltimore.
Our 70-plus undergraduate, graduate and doctoral programs and certificates are aligned with high-demand careers. Our classes are delivered in flexible formats—day, evening, weekend, online—to fit your life and your schedule.
Job Posting:
JR102302 Chief Information Security Officer (Open)
Department:
UBalt OTS Staff Inst Support Admin, PM
Position Type:
Regular
Open Date:
11-09-2026
Close Date:
$135,000 - $160,000
Job Description:
Reporting to the Deputy CIO (DCIO), the Chief Information Security Officer (CISO) is a senior-level technical leader responsible for administering and managing UBalt’s information security architecture, strategy, policies, programs, and practices. The CISO's primary role is to ensure the confidentiality, integrity, and availability of information assets and to protect these assets from various cyber threats and risks. This position and program contribute to the mission of the University by maintaining the integrity of campus technology resources, appropriate protection of information, identification and mitigation of technology and information-related risks and driving compliance with University System of Maryland (USM), state and federal requirements. The CISO is responsible for a range of activities including policy and standards development, security assessments, incident response, awareness training program, log management and monitoring, audit coordination, and oversight of intrusion detection and prevention systems. This position provides analysis, serves as a consultant, and takes an active role in overall technology change management and procurement.
This is a hybrid position that requires on-campus work at least one day per week, with the option to telework up to four days per week. Additional on-campus presence may be required periodically during the academic year to support university activities and operational needs.
Responsibilities:
Information Security Program: Oversees, administers and improves the University’s overall information security program in support of the appropriate confidentiality, integrity, and availability of information and technology systems.
- Monitors security trends and advocates for security practices, policies and technology.
- Facilitates the selection and implementation of information security solutions including, but not limited to, anti-virus, anti-malware, firewalls, virtual private network (VPN), intrusion prevention system (IPS) and security information and event management (SIEM).
- Participates in the selection of IT infrastructure and software; develops and specifies security requirements.
- Leads the University’s privacy initiative, maintaining compliance with USM standards and guidelines.
- Performs ongoing analysis and correlation of information collected by IPS and SIEM systems; responsible for the ongoing maintenance and support of these systems.
- Verifies completion of ongoing maintenance and support of SIEM and IPS systems.
- Leads the security incident response team.
- Investigates incidents that are detected or reported.
- Reports issues to OTS leadership, or other personnel, as appropriate.
- Develops and reviews automated reports to achieve compliance with USM policies, state, federal and audit requirements.
- Reviews security advisories, assessing relevance and risk, and disseminates to relevant technical staff.
- Prepares an annual IT security program update for the Chief Information Officer (CIO). Reviews update with the CIO for presentation to the President.
Audits and Assessments: Acts as the primary point of contact for all IT-related audits in support of consistent, efficient and effective audit activities and overall staff accountability.
- Provides support and oversight for all technology audits of all campus units.
- Serves as project manager on all internal audits involving OTS.
- Tracks resolution of audit findings, providing periodic status updates to CIO.
- Conducts required network and server vulnerability assessments.
- Conducts routine audits of the network infrastructure configuration to ensure security best practices are being utilized.
- Tracks security vulnerabilities and remediation activities; holds employees and leaders accountable for timely resolution.
- Partners with Chief IT Architect to perform vendor security assessments.
- Provides leadership, direction, and continual improvement of a personally identifiable information (PII) monitoring program.
Architecture, Policy, Standard, Guideline and Procedure Development: Oversees the development and maintenance of a comprehensive information security policy framework.
- Identifies needs in the policy framework and proposes associated efforts to the DCIO and CIO.
- Serves as a key developer of information security policies, standards, guidelines, and procedures.
- Work with the Chief IT Architect to develop and document security architecture and standards.
- Periodically reviews elements of the existing policy framework for needed updates.
- Monitors USM policies and State of Maryland legislation for framework requirements.
- Active member of the USM Privacy and Security Councils.
Documentation and Cross Training: Develops and maintains documentation in support of a sustainable and auditable security program.
- Develops and maintains documentation for all aspects of the information security program and infrastructure.
- Reviews security-related documentation of other technology units and makes recommendations for necessary improvements.
- Provides periodic training to staff members serving with backup responsibilities for information security activities.
- Develops, implements and maintains an ongoing IT security awareness program.
- Works with the Office of Human Resources to ensure that faculty, staff, and students are provided with appropriate security training.
Change Management and Project Consulting: Participates in technology change management and on project teams providing comprehensive analysis in support of successful changes and fully developed project requirements and plans.
- Serves on the technology Change Control Board (CCB).
- Participates in project evaluation teams so that security is part of the system development life cycle (SDLC).
Minimum Qualifications:
Education:
Bachelor's degree in Computer Science, Information Technology Engineering, or related field/discipline.
Experience:
- 7 years of IT experience to include:
- 5 years of experience in information security administration and production support in a distributed networking environment
- Required familiarity with major information security tools
- Experience with risk and vulnerability assessment and penetration testing
- Experience working and interacting with technical teams
- CISSP Certification
Preferred Qualifications:
Education: Graduate degree in Computer Science, Information Technology Engineering, or related field.
Experience:
- 10 years of progressively responsible experience in information security administration and enterprise production support
- 3 years of experience in higher education
- Experience with State of Maryland and USM audit processes
Special Hours of Work Required:
Ability to provide 24/7 security incident support as needed is required. Occasional Friday night work may be required to support the established campus technology maintenance period.
Required Knowledge, Skills and Abilities
Analytical Skills
- Ability to perform development and systems analysis including identifying security threats and impact for applications and technology infrastructure used by UBalt.
- Ability to gather, compile and analyze data to make practical recommendations at the tactical level to leadership.
- Experience conducting security analysis, including elements such as:
- Potential security threats to UBalt
- Documenting information security processes
- Developing and assessing business cases for change
- Measuring the impact of security improvements
- Participating in change management processes
Interpersonal
- Flexible, adaptable and able to sustain momentum, effectiveness and enthusiastic demeanor while conditions and organizational structures may be fluid.
- Good interpersonal skills and experience working with multiple internal and external constituencies; able to gain community respect and possesses good relationship building skills.
- Good communication capabilities, including giving presentations, and speaking publicly.
- Ability to translate complex security concepts into easily understandable terms.
- Ability to work well with functional and technical teams and staff at all levels of the organization.
- Demonstrated ability to communicate clearly, concisely and accurately with people, verbally and in writing.
Technical
Infrastructure Hardware and Software:
- Intrusion detection and prevention
- Security incident and event management
- Virtual private networking
- Encryption technology
- Firewalls
- Networks and related components
- Cisco IOS
- Application gateways and load balancers
- Network scanning tools such as Nessus
- Encryption technology
- Communications technology
- Wireless networking
- 802.1x
- Data storage
- Microsoft Windows desktop and server operating systems
- Microsoft SQL Server
- Microsoft Exchange
- Microsoft Office365 security and compliance
- Linux
- Apple desktop and mobile operating systems
- Android operating system
- Microsoft Azure
- Amazon Web Services
- Active Directory and Azure Active Directory
- SAML
- DHCP
- DNS
- LDAP
- SSH
- SMTP
- FTP
- SMB
- CIFS
- NFS
- RDP
- Antivirus
- Terminal Server
We offer a competitive benefits package, including health, life, prescription, and dental plans, tuition remission benefits, paid leave (22 days of annual, 15 days of sick, 3 days of personal, and 14-15 holidays) and retirement plans with employer contributions.
Additional Job Information:
The University of Baltimore ("UBalt" or "University") does not discriminate on the basis of sex, gender, race, religion, age, disability, national origin, ethnicity, sexual orientation, gender identity, or other legally protected characteristics in its programs, activities or employment practices. UBalt is an Equal Opportunity/ADA Compliant Employer & Title IX Institution.
About Us
Leaders learn here.
We’ve been educating leaders for nearly 100 years; you know us through our faculty’s outstanding research and teaching; you know us thanks to the hard work and dedication of our alumni, students and staff. You know us because we are The University of Baltimore.
Our 70-plus undergraduate, graduate and doctoral programs and certificates are aligned with high-demand careers. Our classes are delivered in flexible formats—day, evening, weekend, online—to fit your life and your schedule.
See all Green Card Chief Information Security Officer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Green Card Chief Information Security Officer Jobs.
Get Access To All JobsTips for Finding Green Card Sponsorship in Chief Information Security Officer
Document progressive experience with precision
PERM requires your employer to define the minimum requirements for the CISO role before recruitment begins. Gather performance reviews, promotion letters, and project records that show progressive cybersecurity leadership, because DOL scrutinizes whether your experience genuinely matches the posted job requirements.
Target employers with dedicated immigration counsel
PERM labor certification for a CISO involves coordinating recruitment, prevailing wage determinations, and I-140 filings across months. Prioritize organizations that already employ in-house immigration counsel or retain experienced firms, since fragmented employer processes are a leading cause of PERM delays and denials.
Verify prevailing wage tier before accepting an offer
Use the OFLC Wage Search to look up the prevailing wage for CISO roles in your target metro before negotiations. PERM requires your offered salary to meet or exceed the DOL-determined wage, and an offer below that threshold forces a costly restart of the prevailing wage determination process.
Search Migrate Mate for verified green card sponsors
Find CISO openings at employers with confirmed PERM filing history by searching Migrate Mate. The platform surfaces U.S. employers with verified employment-based green card sponsorship records by role and location, so you can focus outreach on organizations already familiar with the PERM process.
Understand priority date backlogs before you file
If you're a national of India or China, your EB-2 or EB-3 priority date may be significantly backlogged. Check the USCIS Visa Bulletin monthly to gauge realistic timelines, and discuss with your employer whether concurrent I-485 filing is available given your country's current cutoff date.
Protect your priority date if you change employers
Once your original I-140 is approved, your priority date can carry over to a new employer's I-140 petition. If your I-485 has been pending 180 days or more, AC21 portability also allows you to move to a same or similar CISO-level occupation without abandoning your place in the queue.
Green Card Chief Information Security Officer: Frequently Asked Questions
Does a Chief Information Security Officer role qualify for EB-2 or EB-3 green card sponsorship?
Most CISO positions qualify for EB-2 sponsorship because they require an advanced degree in computer science, information security, or a related field, or a bachelor's degree plus at least five years of progressive experience in cybersecurity leadership. EB-3 professional classification is available if the role requires a bachelor's degree but not an advanced one. Your employer determines the minimum requirements before filing PERM, which locks the classification.
How does PERM green card sponsorship differ from H-1B sponsorship for a CISO?
H-1B visa is a temporary nonimmigrant status tied to a specific employer and subject to an annual lottery. PERM-based green card sponsorship is a permanent immigration pathway with no lottery but involves a multi-step process: a prevailing wage determination filed with DOL, a formal recruitment test, PERM certification, then an I-140 petition with USCIS, and finally adjustment of status or consular processing. For nationals of high-demand countries, per-country limits create priority date backlogs that can extend the total timeline substantially.
How do I find employers willing to sponsor a green card for a CISO?
Search Migrate Mate to identify U.S. employers with verified employment-based green card sponsorship history for senior technology and security roles. Because PERM sponsorship is a significant employer commitment, targeting organizations that have already completed PERM filings for comparable positions reduces the risk of an employer withdrawing support mid-process due to unfamiliarity with the requirements.
What happens to my green card case if I change employers as a CISO?
Two separate protections apply depending on your stage. If your original I-140 petition was approved, your priority date can be retained and transferred to a new employer's I-140, so you don't lose your place in the per-country queue. Separately, if your I-485 adjustment of status application has been pending for at least 180 days, AC21 portability allows you to move to a same or similar CISO or senior security leadership occupation without jeopardizing the pending application.
What does the PERM recruitment process look like for a CISO position?
Before filing PERM, your employer must conduct a good-faith recruitment test to demonstrate no minimally qualified U.S. workers are available for the role. For professional positions like CISO, this includes mandatory posting steps and at least three additional recruitment steps specified by DOL, such as advertising in professional journals or on job boards. The employer documents all applicants considered and reasons for rejection, then files the PERM application with DOL. USCIS does not receive the application until after DOL certifies it.