Green Card Information Security Officer Jobs
Information Security Officer roles qualify for EB-2 and EB-3 green card sponsorship through the PERM labor certification process, which requires your employer to document U.S. recruitment efforts before filing an I-140 petition. Cybersecurity leadership positions typically meet specialty occupation standards, making employer-sponsored permanent residency a realistic path for qualified foreign professionals.
Find Green Card Information Security Officer JobsOverview
Showing 5 of 43+ Information Security Officer jobs
See all 43+ Information Security Officer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Officer roles.
Get Access To All JobsINTRODUCTION
ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™.
ABOUT THE ROLE
ASRC Federal Data Networx is seeking a Senior Information System Security Officer (ISSO) to support federal cybersecurity and Risk Management Framework (RMF) activities for enterprise information systems. The ISSO serves as the primary cybersecurity and privacy advisor to System Owners (SOs), ensuring security and privacy requirements are integrated throughout the system lifecycle while maintaining compliance with federal regulations and Authorization to Operate (ATO) requirements.
KEY RESPONSIBILITIES
- Serve as the primary cybersecurity and privacy advisor to System Owners for assigned systems.
- Lead RMF activities, including development and maintenance of System Security and Privacy Plans (SSPPs), authorization packages, risk documentation, and supporting artifacts.
- Ensure systems maintain Authorization to Operate (ATO) through assessment support, continuous monitoring, and compliance with NIST RMF, FISMA, and federal security requirements.
- Assess security risks, validate security controls, and coordinate remediation of vulnerabilities and Plans of Action and Milestones (POA&Ms).
- Maintain system inventories, security documentation, contingency plans, configuration management plans, and privacy documentation.
- Collaborate with ISSMs, System Owners, Security Control Assessors, and technical teams to integrate security throughout the system lifecycle.
- Monitor system security posture, review vulnerability and compliance scan results, and support continuous authorization initiatives.
- Provide cybersecurity guidance, develop security policies and procedures, and deliver security awareness training.
- Support security engineering, certification and accreditation activities, and implementation of security controls across systems.
- Recommend process improvements and automation opportunities to enhance RMF and cybersecurity operations.
BASIC QUALIFICATIONS
- Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or a related field.
- Minimum 5–7 years of experience supporting information assurance, cybersecurity, RMF, or information system security, or an equivalent combination of education and experience.
- Experience supporting federal cybersecurity programs and the NIST Risk Management Framework (RMF).
- Experience developing and maintaining RMF documentation, authorization packages, and Governance, Risk, and Compliance (GRC) tools.
- Strong knowledge of NIST SP 800-37, NIST SP 800-53, FISMA, FIPS 199, and federal privacy requirements.
- Experience supporting Authorization to Operate (ATO), Continuous ATO (cATO), or Continuous Authorization efforts.
- Strong analytical, communication, documentation, and stakeholder engagement skills.
REQUIRED CERTIFICATIONS
- Certified Information Systems Security Professional (CISSP)
- Certified in Governance, Risk and Compliance (CGRC) or Certified Cloud Security Professional (CCSP)
PREFERRED QUALIFICATIONS
- Experience supporting U.S. federal civilian agencies, preferably the USPTO.
- Experience with continuous monitoring, vulnerability management, and security automation.
- Familiarity with cloud security, DevSecOps, and continuous authorization initiatives.
- Knowledge of privacy compliance activities, including Privacy Threshold Assessments (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notices (SORNs).
We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.
ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.
INTRODUCTION
ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™.
ABOUT THE ROLE
ASRC Federal Data Networx is seeking a Senior Information System Security Officer (ISSO) to support federal cybersecurity and Risk Management Framework (RMF) activities for enterprise information systems. The ISSO serves as the primary cybersecurity and privacy advisor to System Owners (SOs), ensuring security and privacy requirements are integrated throughout the system lifecycle while maintaining compliance with federal regulations and Authorization to Operate (ATO) requirements.
KEY RESPONSIBILITIES
- Serve as the primary cybersecurity and privacy advisor to System Owners for assigned systems.
- Lead RMF activities, including development and maintenance of System Security and Privacy Plans (SSPPs), authorization packages, risk documentation, and supporting artifacts.
- Ensure systems maintain Authorization to Operate (ATO) through assessment support, continuous monitoring, and compliance with NIST RMF, FISMA, and federal security requirements.
- Assess security risks, validate security controls, and coordinate remediation of vulnerabilities and Plans of Action and Milestones (POA&Ms).
- Maintain system inventories, security documentation, contingency plans, configuration management plans, and privacy documentation.
- Collaborate with ISSMs, System Owners, Security Control Assessors, and technical teams to integrate security throughout the system lifecycle.
- Monitor system security posture, review vulnerability and compliance scan results, and support continuous authorization initiatives.
- Provide cybersecurity guidance, develop security policies and procedures, and deliver security awareness training.
- Support security engineering, certification and accreditation activities, and implementation of security controls across systems.
- Recommend process improvements and automation opportunities to enhance RMF and cybersecurity operations.
BASIC QUALIFICATIONS
- Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or a related field.
- Minimum 5–7 years of experience supporting information assurance, cybersecurity, RMF, or information system security, or an equivalent combination of education and experience.
- Experience supporting federal cybersecurity programs and the NIST Risk Management Framework (RMF).
- Experience developing and maintaining RMF documentation, authorization packages, and Governance, Risk, and Compliance (GRC) tools.
- Strong knowledge of NIST SP 800-37, NIST SP 800-53, FISMA, FIPS 199, and federal privacy requirements.
- Experience supporting Authorization to Operate (ATO), Continuous ATO (cATO), or Continuous Authorization efforts.
- Strong analytical, communication, documentation, and stakeholder engagement skills.
REQUIRED CERTIFICATIONS
- Certified Information Systems Security Professional (CISSP)
- Certified in Governance, Risk and Compliance (CGRC) or Certified Cloud Security Professional (CCSP)
PREFERRED QUALIFICATIONS
- Experience supporting U.S. federal civilian agencies, preferably the USPTO.
- Experience with continuous monitoring, vulnerability management, and security automation.
- Familiarity with cloud security, DevSecOps, and continuous authorization initiatives.
- Knowledge of privacy compliance activities, including Privacy Threshold Assessments (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notices (SORNs).
We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.
ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.
See all 43+ Green Card Information Security Officer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Green Card Information Security Officer Jobs.
Get Access To All JobsTips for Finding Green Card Sponsorship in Information Security Officer
Document your cybersecurity credentials early
PERM requires your employer to verify your qualifications against the job requirements. Gather degree transcripts, professional certifications like CISSP or CISM, and employment letters that match the specific duties listed in the labor certification application.
Target employers with active PERM filing history
Search the DOL OFLC disclosure data by SOC code for Information Security Analysts to identify companies that have filed PERM applications in your target region. Employers who have navigated PERM before move faster and make fewer errors.
Search for green card sponsoring roles on Migrate Mate
Use Migrate Mate to filter Information Security Officer roles by employers with documented EB-2 and EB-3 sponsorship history. This cuts out the guesswork of cold-applying to companies that have never sponsored a foreign national.
Understand how your degree field affects EB-2 eligibility
EB-2 requires an advanced degree directly related to the role. A master's in computer science or information assurance strengthens your case. A general business degree may push you toward EB-3, which has a longer processing path for some nationalities.
Negotiate PERM filing into your offer before signing
Confirm in writing that your employer will file PERM and cover associated legal fees before you accept the offer. Many companies are willing but won't initiate the process without a direct conversation during the offer stage.
Verify your employer's E-Verify enrollment status
USCIS requires employers sponsoring foreign workers to comply with work authorization verification. E-Verify enrollment signals an employer is familiar with immigration compliance requirements, which reduces friction when PERM documentation and I-140 filing timelines are being set.
Green Card Information Security Officer: Frequently Asked Questions
Does an Information Security Officer role qualify for EB-2 or EB-3 green card sponsorship?
Most Information Security Officer positions qualify for EB-2 if the role requires an advanced degree in a specialized field like cybersecurity, information assurance, or computer science. Roles requiring only a bachelor's degree typically fall under EB-3. Your employer's job description and minimum requirements determine which category applies, and USCIS reviews those requirements as part of the I-140 adjudication.
How does green card sponsorship differ from H-1B sponsorship for this role?
Green card sponsorship through PERM and I-140 is permanent, not subject to the H-1B visa annual lottery, and has no renewal cycle once you reach lawful permanent resident status. The tradeoff is time: PERM alone typically takes six to twelve months before the I-140 is even filed. For most nationalities outside India and China, EB-3 priority dates are current, meaning no additional wait after I-140 approval.
What does the PERM process actually require from a cybersecurity employer?
PERM requires the employer to conduct a formal recruitment campaign, document that no qualified U.S. workers applied, and certify the offered wage meets or exceeds the prevailing wage for the role and location. The DOL reviews the application and may audit the recruitment records. Employers typically work with immigration counsel to complete this process, which takes several months even in straightforward cases.
Where can I find Information Security Officer jobs that offer green card sponsorship?
Migrate Mate lets you search for Information Security Officer roles specifically filtered by employers with EB-2 and EB-3 sponsorship history, so you can focus your applications on companies that have already demonstrated willingness and capacity to sponsor foreign nationals through the PERM process.
Can I switch employers after my PERM is filed but before my green card is approved?
You can change employers after your I-140 is approved and your priority date is current, using the job portability provisions under AC21, provided you move to a same or similar occupational role. Switching before I-140 approval typically means restarting the entire PERM process with the new employer. For Information Security Officers, the O*NET classification helps establish whether a new role qualifies as sufficiently similar.