Green Card Security Compliance Analyst Jobs
Security Compliance Analyst roles qualify for EB-2 and EB-3 green card sponsorship through the PERM labor certification process, which permanently ties your residency to a U.S. employer rather than a temporary visa status. Employers in regulated industries, financial services, healthcare IT, and defense contracting, routinely sponsor compliance professionals because domestic talent shortages make PERM certification straightforward for this specialty.
Find Green Card Security Compliance Analyst JobsOverview
Showing 5 of 11+ Security Compliance Analyst jobs
See all Security Compliance Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Compliance Analyst roles.
Get Access To All JobsJoin us at Entrust
At Entrust, we’re shaping the future of identity centric security solutions. From our comprehensive portfolio of solutions to our flexible, global workplace, we empower careers, foster collaboration, and build solutions that help keep the world moving safely.
Get to Know Us
Headquartered in Minnesota, Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. But our secret weapon? Our people. It’s the curiosity, dedication, and innovation that drive our success and help us anticipate the future.
Position Overview:
Entrust is seeking a highly skilled Senior Security Compliance Analyst to lead and sustain compliance for multiple compliance programs including PCI DSS and U.S. Federal. This role is responsible for designing and executing continuous compliance monitoring activities, identifying gaps and leading associated remediation efforts, planning and leading third-party audits, and measuring control effectiveness across cloud-based, on-prem and hybrid environments. The ideal candidate brings deep PCI DSS expertise, strong knowledge of the Risk Management Framework, FedRAMP and NIST 800-53 frameworks, and modern GRC experience that enables scalable, automated, and evidence-driven compliance operations.
This position partners closely with Security, Engineering, Product, and third-party providers to ensure controls are designed effectively, operating consistently, and aligned to business, statutory and regulatory expectations.
How You Will Make an Impact:
Lead and support end-to-end compliance efforts across multiple environments, including readiness assessments, audits, and continuous monitoring activities to ensure sustained security posture and audit readiness. Responsibilities include, but are not limited to:
- Leading PCI DSS compliance-related activities and certification;
- Supporting U.S. Federal readiness efforts, including gap assessments against NIST SP 800-53 and tracking remediation activities (POA&M);
- Maintaining required evidence artifacts and ensuring traceability of evidence;
- Interpreting and operationalizing compliance requirements into actionable control activities for engineering and operations;
- Serving as SME for PCI DSS and NIST 800-53 compliance, advising internal teams and customers;
- Supporting development of FedRAMP artifacts (e.g., SSP, control narratives, shared responsibility matrices);
- Partnering with control owners to ensure controls meet PCI DSS and NIST 800-53 requirements;
- Supporting external audits by preparing evidence, responding to auditor requests, coordinating audit activities, and tracking remediation;
- Driving coordination with third parties (e.g., service providers, hosting partners) to ensure shared control alignment;
- Ensuring audit readiness through continuous proactive gap assessments and control testing throughout the year;
- Identifying, assessing, and communicating compliance and security risks to stakeholders;
- Identifying, tracking, and driving closure of audit findings and control deficiencies; and
- Contributing to the development and maintenance of security policies, standards, and procedures.
Basic Qualifications:
- 5+ years in security compliance, audit, or GRC with a strong understanding of administrative, technical, and physical controls, including how they support one another
- Hands-on technical and audit experience with PCI DSS and NIST 800-53 compliance
- Ability to work across multiple time zones with virtual global teams
-
Strong technical understanding of:
-
Cloud environments and shared responsibility models
- Access control, change management, logging and altering, and vulnerability management and other security domains
- Experience working in SaaS or cloud-native environments
- Experience working cross-functionally with engineering and infrastructure teams
Preferred Qualifications:
- Experience supporting multiple compliance frameworks (PCI DSS, PCI CP, SOC 2, FedRAMP, NIST 800-53/FISMA, ISO 27001/2, ISO 42001)
- Experience with modern GRC platforms and control automation
- Familiarity with continuous compliance / continuous monitoring models
- Certifications such as: CISSP, CISA, CISM, CRISC, PCI ISA/QSA/PCI CP (preferred but not required)
Where You Will Be: Open to U.S.-based candidates and will be fully remote.
About Entrust:
Our growing company relies on curious, dedicated and innovative colleagues to anticipate the future and provide solutions for a more connected, mobile and secure world. Entrust technologies and expertise help government agencies, enterprises and financial institutions in more than 150 countries, serve and safeguard citizens, employees and consumers. Each year, our solutions secure billions of transactions — and every day, our technologies issue and manage more than 10 million secure identities. How do we do all of this? Together.
At Entrust, we don’t just offer jobs – we offer career journeys. Here is what you can expect when you join our team:
- Career Growth: Whether you’re a budding developer or a seasoned expert, we’re invested in your professional journey. With learning-forward initiatives and exciting challenges, your growth is our priority.
- Flexibility: Life is all about balance. Whether you’re remote, hybrid, or on-site, we offer flexible options that fit your lifestyle.
- Collaboration: Here, your voice matters. Our teams thrive on sharing ideas, brainstorming solutions, and working together to build a better tomorrow.
We believe in securing identities—but it doesn’t stop there. At Entrust, we’re passionate about valuing all identities. Our culture is built on diversity, inclusion, and respect. From unconscious bias training for our leaders to global affinity groups that connect colleagues across the globe, we’re creating a community where everyone is encouraged to be themselves.
Ready to Make an Impact?
If you’re excited by the prospect of innovating, growing your career, and collaborating in a dynamic environment, Entrust is the place for you. Join us in making a difference. Let’s build a more secure world—together.
Apply today!
Compensation Range:
The anticipated starting base pay for this position is: $119,078-$174,648 per year (in the primary posting location). Actual compensation will be determined based on geographic location, education, skills and experience. This position is also eligible for the company’s discretionary annual incentive plan. In addition to your pay, Entrust offers eligible colleagues and their dependents comprehensive health and well-being programs which include medical, vision, dental, a generous 401(k) matching contribution, life and disability insurance, mental health coaching, virtual fitness programs, paid personal time off plus 12 paid holidays, parental leave and education reimbursement. Please speak with the recruiter for more details. Note: Benefit and Compensation programs are subject to eligibility requirements and other terms of the applicable plan or program. Entrust has the right to end, suspend or amend any of its plans at any time in whole or in part.
Entrust is an EEO/AA/Disabled/Veterans Employer
Join us at Entrust
At Entrust, we’re shaping the future of identity centric security solutions. From our comprehensive portfolio of solutions to our flexible, global workplace, we empower careers, foster collaboration, and build solutions that help keep the world moving safely.
Get to Know Us
Headquartered in Minnesota, Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. But our secret weapon? Our people. It’s the curiosity, dedication, and innovation that drive our success and help us anticipate the future.
Position Overview:
Entrust is seeking a highly skilled Senior Security Compliance Analyst to lead and sustain compliance for multiple compliance programs including PCI DSS and U.S. Federal. This role is responsible for designing and executing continuous compliance monitoring activities, identifying gaps and leading associated remediation efforts, planning and leading third-party audits, and measuring control effectiveness across cloud-based, on-prem and hybrid environments. The ideal candidate brings deep PCI DSS expertise, strong knowledge of the Risk Management Framework, FedRAMP and NIST 800-53 frameworks, and modern GRC experience that enables scalable, automated, and evidence-driven compliance operations.
This position partners closely with Security, Engineering, Product, and third-party providers to ensure controls are designed effectively, operating consistently, and aligned to business, statutory and regulatory expectations.
How You Will Make an Impact:
Lead and support end-to-end compliance efforts across multiple environments, including readiness assessments, audits, and continuous monitoring activities to ensure sustained security posture and audit readiness. Responsibilities include, but are not limited to:
- Leading PCI DSS compliance-related activities and certification;
- Supporting U.S. Federal readiness efforts, including gap assessments against NIST SP 800-53 and tracking remediation activities (POA&M);
- Maintaining required evidence artifacts and ensuring traceability of evidence;
- Interpreting and operationalizing compliance requirements into actionable control activities for engineering and operations;
- Serving as SME for PCI DSS and NIST 800-53 compliance, advising internal teams and customers;
- Supporting development of FedRAMP artifacts (e.g., SSP, control narratives, shared responsibility matrices);
- Partnering with control owners to ensure controls meet PCI DSS and NIST 800-53 requirements;
- Supporting external audits by preparing evidence, responding to auditor requests, coordinating audit activities, and tracking remediation;
- Driving coordination with third parties (e.g., service providers, hosting partners) to ensure shared control alignment;
- Ensuring audit readiness through continuous proactive gap assessments and control testing throughout the year;
- Identifying, assessing, and communicating compliance and security risks to stakeholders;
- Identifying, tracking, and driving closure of audit findings and control deficiencies; and
- Contributing to the development and maintenance of security policies, standards, and procedures.
Basic Qualifications:
- 5+ years in security compliance, audit, or GRC with a strong understanding of administrative, technical, and physical controls, including how they support one another
- Hands-on technical and audit experience with PCI DSS and NIST 800-53 compliance
- Ability to work across multiple time zones with virtual global teams
-
Strong technical understanding of:
-
Cloud environments and shared responsibility models
- Access control, change management, logging and altering, and vulnerability management and other security domains
- Experience working in SaaS or cloud-native environments
- Experience working cross-functionally with engineering and infrastructure teams
Preferred Qualifications:
- Experience supporting multiple compliance frameworks (PCI DSS, PCI CP, SOC 2, FedRAMP, NIST 800-53/FISMA, ISO 27001/2, ISO 42001)
- Experience with modern GRC platforms and control automation
- Familiarity with continuous compliance / continuous monitoring models
- Certifications such as: CISSP, CISA, CISM, CRISC, PCI ISA/QSA/PCI CP (preferred but not required)
Where You Will Be: Open to U.S.-based candidates and will be fully remote.
About Entrust:
Our growing company relies on curious, dedicated and innovative colleagues to anticipate the future and provide solutions for a more connected, mobile and secure world. Entrust technologies and expertise help government agencies, enterprises and financial institutions in more than 150 countries, serve and safeguard citizens, employees and consumers. Each year, our solutions secure billions of transactions — and every day, our technologies issue and manage more than 10 million secure identities. How do we do all of this? Together.
At Entrust, we don’t just offer jobs – we offer career journeys. Here is what you can expect when you join our team:
- Career Growth: Whether you’re a budding developer or a seasoned expert, we’re invested in your professional journey. With learning-forward initiatives and exciting challenges, your growth is our priority.
- Flexibility: Life is all about balance. Whether you’re remote, hybrid, or on-site, we offer flexible options that fit your lifestyle.
- Collaboration: Here, your voice matters. Our teams thrive on sharing ideas, brainstorming solutions, and working together to build a better tomorrow.
We believe in securing identities—but it doesn’t stop there. At Entrust, we’re passionate about valuing all identities. Our culture is built on diversity, inclusion, and respect. From unconscious bias training for our leaders to global affinity groups that connect colleagues across the globe, we’re creating a community where everyone is encouraged to be themselves.
Ready to Make an Impact?
If you’re excited by the prospect of innovating, growing your career, and collaborating in a dynamic environment, Entrust is the place for you. Join us in making a difference. Let’s build a more secure world—together.
Apply today!
Compensation Range:
The anticipated starting base pay for this position is: $119,078-$174,648 per year (in the primary posting location). Actual compensation will be determined based on geographic location, education, skills and experience. This position is also eligible for the company’s discretionary annual incentive plan. In addition to your pay, Entrust offers eligible colleagues and their dependents comprehensive health and well-being programs which include medical, vision, dental, a generous 401(k) matching contribution, life and disability insurance, mental health coaching, virtual fitness programs, paid personal time off plus 12 paid holidays, parental leave and education reimbursement. Please speak with the recruiter for more details. Note: Benefit and Compensation programs are subject to eligibility requirements and other terms of the applicable plan or program. Entrust has the right to end, suspend or amend any of its plans at any time in whole or in part.
Entrust is an EEO/AA/Disabled/Veterans Employer
See all Green Card Security Compliance Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Green Card Security Compliance Analyst Jobs.
Get Access To All JobsTips for Finding Green Card Sponsorship as a Security Compliance Analyst
Align your credentials to PERM job requirements
PERM requires the employer to define minimum qualifications before posting the role. Make sure your degree field and years of experience match exactly what appears in the labor certification, even minor gaps can trigger a USCIS audit at the I-140 stage.
Target employers in compliance-heavy regulated industries
Financial institutions subject to SOC 2 and FedRAMP requirements, defense contractors handling CMMC compliance, and large healthcare networks face persistent auditor shortages. These organizations routinely file PERM because their compliance workloads justify permanent sponsorship over short-term visa arrangements.
Use Migrate Mate to find verified sponsoring employers
Search for Security Compliance Analyst roles on Migrate Mate to filter specifically for employers with active green card sponsorship history. This removes the guesswork of cold-applying to companies that have never filed PERM for this job category.
Verify the prevailing wage tier before accepting an offer
DOL assigns your PERM filing to a wage level that your offered salary must meet. Use the OFLC Wage Search to check the Level I through Level IV prevailing wage for your metro area before negotiating, an offer below the certified wage forces the employer to refile.
Confirm your employer will file concurrently if your priority date allows
If your country of birth keeps EB-3 dates current, ask whether the employer will file your I-485 adjustment of status concurrently with the I-140. Concurrent filing lets you work and travel without maintaining a separate nonimmigrant visa while USCIS adjudicates your green card.
Document every certification and audit scope before PERM starts
PERM job descriptions for compliance roles often specify framework knowledge: NIST, ISO 27001, HIPAA, or PCI-DSS. Gather your certificates, audit reports, and scope letters now. An employer's attorney will need these to draft a defensible job description that survives DOL scrutiny.
Green Card Security Compliance Analyst: Frequently Asked Questions
Does a Security Compliance Analyst role qualify for EB-2 or EB-3 sponsorship?
Both categories apply depending on the employer's stated requirements. If the position requires a master's degree or a bachelor's degree plus five years of progressive compliance experience, the employer can file under EB-2. Roles requiring a bachelor's degree and two years of relevant experience typically qualify under EB-3 skilled worker. The employer's attorney drafts the PERM job description to match whichever category fits the actual position.
How does green card sponsorship differ from H-1B sponsorship for this role?
H-1B visa is temporary, subject to a lottery, and tied to a two or three year validity period. PERM-based green card sponsorship has no annual cap at the EB-3 level for most countries, is permanent once approved, and gives you a path to lawful permanent residency rather than repeated renewals. The trade-off is timeline: PERM plus I-140 adjudication typically runs 18 to 30 months before you reach the adjustment of status stage, longer than an initial H-1B approval.
How can I find Security Compliance Analyst jobs that offer green card sponsorship?
Migrate Mate lets you search Security Compliance Analyst openings filtered by employers with documented green card sponsorship history, so you're not spending time applying to companies that have never filed PERM for this job category. Focusing your search this way significantly shortens the time between application and a credible sponsorship conversation with a hiring manager.
What does the PERM labor certification process look like for a compliance analyst role?
The employer files ETA Form 9089 with DOL after conducting a supervised recruitment campaign to demonstrate no qualified U.S. workers are available. For compliance analyst positions, DOL may scrutinize the stated degree requirement and experience level closely. If certified, the employer moves to the I-140 immigrant petition with USCIS. Standard PERM processing runs 6 to 18 months; audited cases can add another 12 months or more.
Can I change employers after my PERM is filed but before I get my green card?
You can change employers after your I-140 is approved and your priority date is current, provided your I-485 has been pending for at least 180 days. Under AC21 portability, the new role must be in the same or a similar occupational classification as the sponsored position. For compliance analysts, a move to a related security or risk management role at a new company generally satisfies this requirement, but confirm the classification match with an immigration attorney before resigning.