Green Card Information Security Officer Jobs
Information Security Officer roles qualify for EB-2 and EB-3 green card sponsorship through the PERM labor certification process, which requires your employer to document U.S. recruitment efforts before filing an I-140 petition. Cybersecurity leadership positions typically meet specialty occupation standards, making employer-sponsored permanent residency a realistic path for qualified foreign professionals.
Find Green Card Information Security Officer JobsOverview
Showing 5 of 27+ Information Security Officer jobs
See all Information Security Officer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Officer roles.
Get Access To All JobsINTRODUCTION
Join the Texas Health and Human Services Commission (HHSC) and be part of a team committed to creating a positive impact in the lives of fellow Texans. At HHSC, your contributions matter, and we support you at each stage of your life and work journey. Our comprehensive benefits package includes 100% paid employee health insurance for full-time eligible employees, a defined benefit pension plan, generous time off benefits, numerous opportunities for career advancement and more. Explore more details on the Benefits of Working at HHS webpage.
ROLE AND RESPONSIBILITIES
The Texas Health and Human Services Commission (HHSC) is seeking an exceptional Chief Information Security Officer (CISO) to lead cybersecurity across one of the largest and most mission-critical public-sector technology environments in Texas.
The CISO will shape the future of cybersecurity across the HHS system, protecting critical services and sensitive information while enabling secure innovation and modernization. This executive will lead HHS in addressing emerging risks, including artificial intelligence, cloud transformation, third-party risk, and post-quantum cryptography.
Reporting to the Deputy Chief Operations Officer, the CISO serves as the executive leader for Cybersecurity Operations and Information Security Governance, Risk, & Compliance.
Cybersecurity Operations provides strategic oversight of cybersecurity operations, threat and vulnerability management, incident response, and recovery to protect critical systems and maintain operational resilience.
Governance, Risk, & Compliance directs enterprise information security governance, risk, compliance, security architecture, and modernization to protect agency information and ensure security is integrated across technology and operations.
Working alongside leaders of Procurement, Payroll, Human Resources, Facilities, and other critical operational functions, the CISO will exercise significant latitude for independent judgment and decision-making and may be asked to represent HHS on cybersecurity matters with state and federal agencies, the Office of the Governor, the Texas Legislature, and other external stakeholders.
The successful candidate will be a strategic executive who can translate cybersecurity risk into business decisions, build strong partnerships across the organization, and lead a mature cybersecurity program protecting sensitive health, benefits, operational, and agency information.
Essential Job Functions (EJFs):
-
Develops and establishes goals consistent with the agency’s strategic plan and effectively achieves them
Serves as the agencies Designated Information Security Officer. Ensures cybersecurity objectives align with agency priorities, business operations, and risk management goals. Communicates complex cybersecurity risks and opportunities in business terms and provides regular briefings to executive leadership regarding security posture, emerging threats, compliance obligations, and investment priorities. Ensures information security risks are evaluated alongside operational, financial, regulatory, and strategic risks as part of enterprise decision-making. Leads development of long-term cybersecurity strategy, governance frameworks, and performance measures to support agency resiliency and mission success. -
Maintains a positive customer service for those internal and external to the agency
Builds trusted partnerships with agency leadership, programs, technology teams, and external stakeholders to understand business needs and deliver practical, risk-based cybersecurity solutions. Promotes a service-oriented security culture that enables agency operations and modernization while protecting critical information and systems. -
Directs program activities and/or business functions within a department or division to ensure timely deliverables
Directs enterprise cybersecurity, risk management, and resilience activities to protect critical systems and ensure continuity of agency operations. Provides strategic oversight of cybersecurity operations, incident response, disaster recovery, security architecture, compliance, and emerging technologies, while ensuring security is integrated into technology planning, procurement, operations, and third-party relationships. -
Effectively communicates status of work and identifies potential issues both up and down the chain of command and to appropriate adjacent areas inside and outside of the agency
Communicates cybersecurity priorities, status, risks, and emerging issues to executive leadership, staff, and key internal and external partners, ensuring timely escalation and coordination when action is required. -
Develops policies, procedures, and guidelines; and monitors compliance
Directs the development, implementation, and oversight of policies, procedures, standards, and guidelines governing CISO operations and HHS information security for both internal and external use. Monitors compliance to ensure consistent and effective execution. -
Develops, coaches, and trains staff to be effective members of the team and prepares them for success in their roles and career
Builds and develops a high-performing cybersecurity workforce through coaching, training, professional development, and succession planning to strengthen capabilities and prepare staff for continued growth and leadership.
BASIC QUALIFICATIONS
- Knowledge of enterprise cybersecurity strategy, governance, risk management, security operations, incident response, and applicable regulatory requirements in a large public-sector environment.
- Knowledge of state and federal cybersecurity frameworks and standards, including NIST guidance, Texas Administrative Code Chapter 202, the Texas Cybersecurity Framework, and risk-based security controls.
- Knowledge of information security governance, security architecture, technology risk management, data protection, identity and access management, cloud security, and emerging cybersecurity trends.
- Knowledge of business continuity, disaster recovery, vendor management, contract oversight, and third-party technology risk management.
- Skill in leading large, complex cybersecurity programs and developing enterprise security strategies, governance structures, policies, and measurable outcomes.
- Skill in translating cybersecurity risks into actionable business decisions and communicating effectively with executives, technical staff, public officials, auditors, and other stakeholders.
- Skill in building collaborative relationships and leading security assessments, risk analyses, incident response efforts, audits, and remediation activities.
- Skill in managing large-scale initiatives, budgets, contracts, competing priorities, and developing high-performing cybersecurity teams.
- Ability to provide visionary leadership, exercise sound judgment, and foster a proactive, risk-informed, and mission-focused security culture.
- Ability to balance security, compliance, operational needs, modernization efforts, and user experience while implementing effective solutions to complex challenges.
- Ability to anticipate and address evolving cybersecurity threats and risks and maintain the security, availability, and integrity of critical systems and information resources.
- Ability to exercise independent judgment, manage confidential information, and uphold the highest standards of ethics and professionalism.
PREFERRED QUALIFICATIONS
Preference for professional certification such as:
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- Certified Information Systems Auditor (CISA)
- Certified in Risk and Information Systems Control (CRISC)
- GIAC certification, or cloud security certification, or comparable advanced cybersecurity credentials.
INITIAL SCREENING CRITERIA
- Graduation from an accredited four-year college or university with major coursework in cybersecurity, computer science, information technology, management information systems, engineering, public administration, business administration, or a related field. Relevant senior-level experience may be considered as a substitution for education.
- At least 10 years of progressively responsible experience in cybersecurity, information security, technology risk management, security operations, enterprise technology leadership, or a closely related field is required.
- Experience with cybersecurity frameworks, regulatory compliance, audit coordination, risk management, or security governance in a public-sector, healthcare, financial, critical infrastructure, or similarly regulated environment is required.
- Experience leading cybersecurity, information security, technology risk, or technical teams in a large, complex organization is preferred.
- Experience working in Health and Human Services agencies, Texas State Government, and Public sector are preferred in that order.
ADDITIONAL INFORMATION
N/A
Review our Tips for Success when applying for jobs at DFPS, DSHS and HHSC.
Active Duty, Military, Reservists, Guardsmen, and Veterans:
Military occupation(s) that relate to the initial selection criteria and registration or licensure requirements for this position may include, but not limited to those listed in this posting. All active-duty military, reservists, guardsmen, and veterans are encouraged to apply if qualified to fill this position. For more information please see the Texas State Auditor’s Job Descriptions, Military Crosswalk and Military Crosswalk Guide at Texas State Auditor's Office - Job Descriptions.
ADA Accommodations:
In compliance with the Americans with Disabilities Act (ADA), HHSC and DSHS agencies will provide reasonable accommodation during the hiring and selection process for qualified individuals with a disability. If you need assistance completing the online application, contact the HHS Employee Service Center at 1-888-894-4747. If you are contacted for an interview and need accommodation to participate in the interview process, please notify the person scheduling the interview.
Pre-Employment Checks and Work Eligibility:
Depending on the program area and position requirements, applicants selected for hire may be required to pass background and other due diligence checks.
HHSC uses E-Verify. You must bring your I-9 documentation with you on your first day of work. Download the I-9 Form.
Telework Disclaimer:
This position may be eligible for telework. Please note, all HHS positions are subject to state and agency telework policies in addition to the discretion of the direct supervisor and business needs.
LOCATION
Job Location City: AUSTIN
Job Location Address: 701 W 51ST ST
Other Locations: Austin
Salary Range: $11,298.08 - $19,107.91
Pay Frequency: Monthly
Salary Group: TEXAS-B-32
Shift: Day
Additional Shift: Days (First)
Telework: Not Eligible for Telework
Travel: Up to 5%
Regular/Temporary: Regular
Full Time/Part Time: Full time
FLSA Exempt/Non-Exempt: Exempt
Facility Location:
MOS Codes: 0605,0630,0631,0639,0670,0679,0681,1702,1705,1710,1720,1721,1799,2611,2659,8055,8858,14N,14NX,170A,170B,17A,17B,17C,17C0,17DX,17S,17SX,17X,181X,182X,183X,184X,1B4X1,1D7X1,255A,255N,255S,25B,25D,26A,26B,26Z,514A,5C0X1D,5C0X1N,5C0X1S,5I0,5IX,681X,682X,683X,781X,782X,783X,784X,CT,CTI,CTM,CTR,CWT,CYB10,CYB11,CYB12,CYB13,CYB14,IS,ISM,ISS,IT,ITS
INTRODUCTION
Join the Texas Health and Human Services Commission (HHSC) and be part of a team committed to creating a positive impact in the lives of fellow Texans. At HHSC, your contributions matter, and we support you at each stage of your life and work journey. Our comprehensive benefits package includes 100% paid employee health insurance for full-time eligible employees, a defined benefit pension plan, generous time off benefits, numerous opportunities for career advancement and more. Explore more details on the Benefits of Working at HHS webpage.
ROLE AND RESPONSIBILITIES
The Texas Health and Human Services Commission (HHSC) is seeking an exceptional Chief Information Security Officer (CISO) to lead cybersecurity across one of the largest and most mission-critical public-sector technology environments in Texas.
The CISO will shape the future of cybersecurity across the HHS system, protecting critical services and sensitive information while enabling secure innovation and modernization. This executive will lead HHS in addressing emerging risks, including artificial intelligence, cloud transformation, third-party risk, and post-quantum cryptography.
Reporting to the Deputy Chief Operations Officer, the CISO serves as the executive leader for Cybersecurity Operations and Information Security Governance, Risk, & Compliance.
Cybersecurity Operations provides strategic oversight of cybersecurity operations, threat and vulnerability management, incident response, and recovery to protect critical systems and maintain operational resilience.
Governance, Risk, & Compliance directs enterprise information security governance, risk, compliance, security architecture, and modernization to protect agency information and ensure security is integrated across technology and operations.
Working alongside leaders of Procurement, Payroll, Human Resources, Facilities, and other critical operational functions, the CISO will exercise significant latitude for independent judgment and decision-making and may be asked to represent HHS on cybersecurity matters with state and federal agencies, the Office of the Governor, the Texas Legislature, and other external stakeholders.
The successful candidate will be a strategic executive who can translate cybersecurity risk into business decisions, build strong partnerships across the organization, and lead a mature cybersecurity program protecting sensitive health, benefits, operational, and agency information.
Essential Job Functions (EJFs):
-
Develops and establishes goals consistent with the agency’s strategic plan and effectively achieves them
Serves as the agencies Designated Information Security Officer. Ensures cybersecurity objectives align with agency priorities, business operations, and risk management goals. Communicates complex cybersecurity risks and opportunities in business terms and provides regular briefings to executive leadership regarding security posture, emerging threats, compliance obligations, and investment priorities. Ensures information security risks are evaluated alongside operational, financial, regulatory, and strategic risks as part of enterprise decision-making. Leads development of long-term cybersecurity strategy, governance frameworks, and performance measures to support agency resiliency and mission success. -
Maintains a positive customer service for those internal and external to the agency
Builds trusted partnerships with agency leadership, programs, technology teams, and external stakeholders to understand business needs and deliver practical, risk-based cybersecurity solutions. Promotes a service-oriented security culture that enables agency operations and modernization while protecting critical information and systems. -
Directs program activities and/or business functions within a department or division to ensure timely deliverables
Directs enterprise cybersecurity, risk management, and resilience activities to protect critical systems and ensure continuity of agency operations. Provides strategic oversight of cybersecurity operations, incident response, disaster recovery, security architecture, compliance, and emerging technologies, while ensuring security is integrated into technology planning, procurement, operations, and third-party relationships. -
Effectively communicates status of work and identifies potential issues both up and down the chain of command and to appropriate adjacent areas inside and outside of the agency
Communicates cybersecurity priorities, status, risks, and emerging issues to executive leadership, staff, and key internal and external partners, ensuring timely escalation and coordination when action is required. -
Develops policies, procedures, and guidelines; and monitors compliance
Directs the development, implementation, and oversight of policies, procedures, standards, and guidelines governing CISO operations and HHS information security for both internal and external use. Monitors compliance to ensure consistent and effective execution. -
Develops, coaches, and trains staff to be effective members of the team and prepares them for success in their roles and career
Builds and develops a high-performing cybersecurity workforce through coaching, training, professional development, and succession planning to strengthen capabilities and prepare staff for continued growth and leadership.
BASIC QUALIFICATIONS
- Knowledge of enterprise cybersecurity strategy, governance, risk management, security operations, incident response, and applicable regulatory requirements in a large public-sector environment.
- Knowledge of state and federal cybersecurity frameworks and standards, including NIST guidance, Texas Administrative Code Chapter 202, the Texas Cybersecurity Framework, and risk-based security controls.
- Knowledge of information security governance, security architecture, technology risk management, data protection, identity and access management, cloud security, and emerging cybersecurity trends.
- Knowledge of business continuity, disaster recovery, vendor management, contract oversight, and third-party technology risk management.
- Skill in leading large, complex cybersecurity programs and developing enterprise security strategies, governance structures, policies, and measurable outcomes.
- Skill in translating cybersecurity risks into actionable business decisions and communicating effectively with executives, technical staff, public officials, auditors, and other stakeholders.
- Skill in building collaborative relationships and leading security assessments, risk analyses, incident response efforts, audits, and remediation activities.
- Skill in managing large-scale initiatives, budgets, contracts, competing priorities, and developing high-performing cybersecurity teams.
- Ability to provide visionary leadership, exercise sound judgment, and foster a proactive, risk-informed, and mission-focused security culture.
- Ability to balance security, compliance, operational needs, modernization efforts, and user experience while implementing effective solutions to complex challenges.
- Ability to anticipate and address evolving cybersecurity threats and risks and maintain the security, availability, and integrity of critical systems and information resources.
- Ability to exercise independent judgment, manage confidential information, and uphold the highest standards of ethics and professionalism.
PREFERRED QUALIFICATIONS
Preference for professional certification such as:
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- Certified Information Systems Auditor (CISA)
- Certified in Risk and Information Systems Control (CRISC)
- GIAC certification, or cloud security certification, or comparable advanced cybersecurity credentials.
INITIAL SCREENING CRITERIA
- Graduation from an accredited four-year college or university with major coursework in cybersecurity, computer science, information technology, management information systems, engineering, public administration, business administration, or a related field. Relevant senior-level experience may be considered as a substitution for education.
- At least 10 years of progressively responsible experience in cybersecurity, information security, technology risk management, security operations, enterprise technology leadership, or a closely related field is required.
- Experience with cybersecurity frameworks, regulatory compliance, audit coordination, risk management, or security governance in a public-sector, healthcare, financial, critical infrastructure, or similarly regulated environment is required.
- Experience leading cybersecurity, information security, technology risk, or technical teams in a large, complex organization is preferred.
- Experience working in Health and Human Services agencies, Texas State Government, and Public sector are preferred in that order.
ADDITIONAL INFORMATION
N/A
Review our Tips for Success when applying for jobs at DFPS, DSHS and HHSC.
Active Duty, Military, Reservists, Guardsmen, and Veterans:
Military occupation(s) that relate to the initial selection criteria and registration or licensure requirements for this position may include, but not limited to those listed in this posting. All active-duty military, reservists, guardsmen, and veterans are encouraged to apply if qualified to fill this position. For more information please see the Texas State Auditor’s Job Descriptions, Military Crosswalk and Military Crosswalk Guide at Texas State Auditor's Office - Job Descriptions.
ADA Accommodations:
In compliance with the Americans with Disabilities Act (ADA), HHSC and DSHS agencies will provide reasonable accommodation during the hiring and selection process for qualified individuals with a disability. If you need assistance completing the online application, contact the HHS Employee Service Center at 1-888-894-4747. If you are contacted for an interview and need accommodation to participate in the interview process, please notify the person scheduling the interview.
Pre-Employment Checks and Work Eligibility:
Depending on the program area and position requirements, applicants selected for hire may be required to pass background and other due diligence checks.
HHSC uses E-Verify. You must bring your I-9 documentation with you on your first day of work. Download the I-9 Form.
Telework Disclaimer:
This position may be eligible for telework. Please note, all HHS positions are subject to state and agency telework policies in addition to the discretion of the direct supervisor and business needs.
LOCATION
Job Location City: AUSTIN
Job Location Address: 701 W 51ST ST
Other Locations: Austin
Salary Range: $11,298.08 - $19,107.91
Pay Frequency: Monthly
Salary Group: TEXAS-B-32
Shift: Day
Additional Shift: Days (First)
Telework: Not Eligible for Telework
Travel: Up to 5%
Regular/Temporary: Regular
Full Time/Part Time: Full time
FLSA Exempt/Non-Exempt: Exempt
Facility Location:
MOS Codes: 0605,0630,0631,0639,0670,0679,0681,1702,1705,1710,1720,1721,1799,2611,2659,8055,8858,14N,14NX,170A,170B,17A,17B,17C,17C0,17DX,17S,17SX,17X,181X,182X,183X,184X,1B4X1,1D7X1,255A,255N,255S,25B,25D,26A,26B,26Z,514A,5C0X1D,5C0X1N,5C0X1S,5I0,5IX,681X,682X,683X,781X,782X,783X,784X,CT,CTI,CTM,CTR,CWT,CYB10,CYB11,CYB12,CYB13,CYB14,IS,ISM,ISS,IT,ITS
See all Green Card Information Security Officer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Green Card Information Security Officer Jobs.
Get Access To All JobsTips for Finding Green Card Sponsorship in Information Security Officer
Document your cybersecurity credentials early
PERM requires your employer to verify your qualifications against the job requirements. Gather degree transcripts, professional certifications like CISSP or CISM, and employment letters that match the specific duties listed in the labor certification application.
Target employers with active PERM filing history
Search the DOL OFLC disclosure data by SOC code for Information Security Analysts to identify companies that have filed PERM applications in your target region. Employers who have navigated PERM before move faster and make fewer errors.
Search for green card sponsoring roles on Migrate Mate
Use Migrate Mate to filter Information Security Officer roles by employers with documented EB-2 and EB-3 sponsorship history. This cuts out the guesswork of cold-applying to companies that have never sponsored a foreign national.
Understand how your degree field affects EB-2 eligibility
EB-2 requires an advanced degree directly related to the role. A master's in computer science or information assurance strengthens your case. A general business degree may push you toward EB-3, which has a longer processing path for some nationalities.
Negotiate PERM filing into your offer before signing
Confirm in writing that your employer will file PERM and cover associated legal fees before you accept the offer. Many companies are willing but won't initiate the process without a direct conversation during the offer stage.
Verify your employer's E-Verify enrollment status
USCIS requires employers sponsoring foreign workers to comply with work authorization verification. E-Verify enrollment signals an employer is familiar with immigration compliance requirements, which reduces friction when PERM documentation and I-140 filing timelines are being set.
Green Card Information Security Officer: Frequently Asked Questions
Does an Information Security Officer role qualify for EB-2 or EB-3 green card sponsorship?
Most Information Security Officer positions qualify for EB-2 if the role requires an advanced degree in a specialized field like cybersecurity, information assurance, or computer science. Roles requiring only a bachelor's degree typically fall under EB-3. Your employer's job description and minimum requirements determine which category applies, and USCIS reviews those requirements as part of the I-140 adjudication.
How does green card sponsorship differ from H-1B sponsorship for this role?
Green card sponsorship through PERM and I-140 is permanent, not subject to the H-1B visa annual lottery, and has no renewal cycle once you reach lawful permanent resident status. The tradeoff is time: PERM alone typically takes six to twelve months before the I-140 is even filed. For most nationalities outside India and China, EB-3 priority dates are current, meaning no additional wait after I-140 approval.
What does the PERM process actually require from a cybersecurity employer?
PERM requires the employer to conduct a formal recruitment campaign, document that no qualified U.S. workers applied, and certify the offered wage meets or exceeds the prevailing wage for the role and location. The DOL reviews the application and may audit the recruitment records. Employers typically work with immigration counsel to complete this process, which takes several months even in straightforward cases.
Where can I find Information Security Officer jobs that offer green card sponsorship?
Migrate Mate lets you search for Information Security Officer roles specifically filtered by employers with EB-2 and EB-3 sponsorship history, so you can focus your applications on companies that have already demonstrated willingness and capacity to sponsor foreign nationals through the PERM process.
Can I switch employers after my PERM is filed but before my green card is approved?
You can change employers after your I-140 is approved and your priority date is current, using the job portability provisions under AC21, provided you move to a same or similar occupational role. Switching before I-140 approval typically means restarting the entire PERM process with the new employer. For Information Security Officers, the O*NET classification helps establish whether a new role qualifies as sufficiently similar.