H-1B Visa Senior Information Security Analyst Jobs
Senior Information Security Analyst roles qualify as H-1B visa specialty occupations because they require a bachelor's degree or higher in computer science, cybersecurity, or a related field. Employers filing H-1B petitions for this role must certify a prevailing wage through a DOL Labor Condition Application before USCIS can approve the petition.
Find H-1B Visa Senior Information Security Analyst JobsOverview
Showing 5 of 891+ Senior Information Security Analyst jobs
See all 891+ Senior Information Security Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Senior Information Security Analyst roles.
Get Access To All JobsINTRODUCTION
The Senior IT Security Architect & Information System Security Officer bridges software delivery and enterprise risk management. This role ensures projects are architected securely from day one, minimizing compliance bottlenecks, protecting critical assets, and ensuring rapid, safe deployments. Acting as both the security designer and compliance lead, the position will govern security controls, lead authorization efforts, and guide engineering teams through risk mitigation.
ROLE AND RESPONSIBILITIES
Key Responsibilities & Deliverables:
-
Security Architecture & System Design:
-
Define and enforce security architecture standards across legacy and modern cloud/hybrid environments.
- Conduct threat modeling and risk assessments during initial project design phases to avoid costly security retrofits late in the delivery cycle.
- Establish secure identity and access management (IAM) strategies and modern authentication standards (e.g., SSO, MFA) to ensure authorized staff and external vendors have seamless, zero-trust access to critical applications without compromising data boundaries.
-
Provide oversight and design standards for Disaster Recovery (DR) and incident response plans during initial project blueprints—ensuring business-critical Medicaid systems can rapidly recover from outages or cyber disruptions with minimal operational downtime.
-
ISSO & Compliance Governance:
-
Lead system compliance and authorization efforts aligned with CMS ARC-AMPE standards, including authoring and maintaining the System Security and Privacy Plan (SSPP), Risk Assessment Reports (RARs), and continuous Plan of Action & Milestones (POA&Ms) to ensure federal requirements are satisfied.
- Change Governance & Security Impact Analyses (SIA): Author, evaluate, and review formal Security Impact Analyses (SIAs) for planned enterprise technology (OET) modifications and new capabilities—ensuring system updates do not degrade existing security postures or disrupt live healthcare operations.
-
Serve as the primary liaison for internal and external cybersecurity audits and compliance reviews (e.g., NIST SP 800-53, FedRAMP, CMMC, or ISO 27001).
-
Continuous Monitoring & Risk Mitigation:
-
Establish continuous security monitoring strategies to identify, track, and remediate vulnerabilities in real time.
-
Translate technical vulnerabilities (e.g., CVEs, patch backlogs) into clear business risk terms for project leadership and executive stakeholders.
-
Data Privacy & Healthcare Compliance:
-
Architect end-to-end data encryption and strict access controls to safeguard sensitive citizen data—specifically Protected Health Information (PHI) and Personally Identifiable Information (PII)—ensuring compliance with HIPAA, CMS, and state privacy mandates.
-
Cross-Functional Integration:
-
Collaborate closely with DevOps and engineering teams to embed security automation into CI/CD pipelines (DevSecOps).
- Provide technical leadership and guidance to project teams to balance security controls with project velocity and system performance.
- Serve as the primary security bridge between project teams and executive leadership—ensuring full alignment with the Chief Information Security Officer (CISO) and Architecture Review Board (ARB) standards to eliminate compliance friction early in the development lifecycle.
- Partner directly with the program’s CMS Certification lead to align technical security designs with evolving CMS certification criteria and federal guidance.
BASIC QUALIFICATIONS
- Education: Bachelor’s Degree from an accredited college or university in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field. Master’s degree preferred.
- General Experience: Minimum of ten (10) years of experience in IT system planning, architecture, and security design.
-
Specialized Security/ISSO Experience:
-
Minimum of five (5) years directly performing ISSO functions, security architecture design, or leading system authorization efforts for complex, large-scale IT implementations.
- Demonstrated, hands-on experience authoring, updating, and defending security control baselines, System Security Plans (SSPs), and active POA&Ms under NIST SP 800-53 and CMS compliance frameworks—specifically with direct familiarity in CMS ARC-AMPE (Acceptable Risk Controls for ACA, Medicaid, and Partner Entities) or the MARS-E to ARC-AMPE transition; candidates must be comfortable producing clear, audit-ready regulatory documentation as a regular deliverable.
PREFERRED QUALIFICATIONS
- Certifications (Preferred): Active industry certifications such as CISSP, CISM, ISSAP, or Certified Cloud Security Professional (CCSP).
LOCATION
Location: Remote
Only W2
INTRODUCTION
The Senior IT Security Architect & Information System Security Officer bridges software delivery and enterprise risk management. This role ensures projects are architected securely from day one, minimizing compliance bottlenecks, protecting critical assets, and ensuring rapid, safe deployments. Acting as both the security designer and compliance lead, the position will govern security controls, lead authorization efforts, and guide engineering teams through risk mitigation.
ROLE AND RESPONSIBILITIES
Key Responsibilities & Deliverables:
-
Security Architecture & System Design:
-
Define and enforce security architecture standards across legacy and modern cloud/hybrid environments.
- Conduct threat modeling and risk assessments during initial project design phases to avoid costly security retrofits late in the delivery cycle.
- Establish secure identity and access management (IAM) strategies and modern authentication standards (e.g., SSO, MFA) to ensure authorized staff and external vendors have seamless, zero-trust access to critical applications without compromising data boundaries.
-
Provide oversight and design standards for Disaster Recovery (DR) and incident response plans during initial project blueprints—ensuring business-critical Medicaid systems can rapidly recover from outages or cyber disruptions with minimal operational downtime.
-
ISSO & Compliance Governance:
-
Lead system compliance and authorization efforts aligned with CMS ARC-AMPE standards, including authoring and maintaining the System Security and Privacy Plan (SSPP), Risk Assessment Reports (RARs), and continuous Plan of Action & Milestones (POA&Ms) to ensure federal requirements are satisfied.
- Change Governance & Security Impact Analyses (SIA): Author, evaluate, and review formal Security Impact Analyses (SIAs) for planned enterprise technology (OET) modifications and new capabilities—ensuring system updates do not degrade existing security postures or disrupt live healthcare operations.
-
Serve as the primary liaison for internal and external cybersecurity audits and compliance reviews (e.g., NIST SP 800-53, FedRAMP, CMMC, or ISO 27001).
-
Continuous Monitoring & Risk Mitigation:
-
Establish continuous security monitoring strategies to identify, track, and remediate vulnerabilities in real time.
-
Translate technical vulnerabilities (e.g., CVEs, patch backlogs) into clear business risk terms for project leadership and executive stakeholders.
-
Data Privacy & Healthcare Compliance:
-
Architect end-to-end data encryption and strict access controls to safeguard sensitive citizen data—specifically Protected Health Information (PHI) and Personally Identifiable Information (PII)—ensuring compliance with HIPAA, CMS, and state privacy mandates.
-
Cross-Functional Integration:
-
Collaborate closely with DevOps and engineering teams to embed security automation into CI/CD pipelines (DevSecOps).
- Provide technical leadership and guidance to project teams to balance security controls with project velocity and system performance.
- Serve as the primary security bridge between project teams and executive leadership—ensuring full alignment with the Chief Information Security Officer (CISO) and Architecture Review Board (ARB) standards to eliminate compliance friction early in the development lifecycle.
- Partner directly with the program’s CMS Certification lead to align technical security designs with evolving CMS certification criteria and federal guidance.
BASIC QUALIFICATIONS
- Education: Bachelor’s Degree from an accredited college or university in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field. Master’s degree preferred.
- General Experience: Minimum of ten (10) years of experience in IT system planning, architecture, and security design.
-
Specialized Security/ISSO Experience:
-
Minimum of five (5) years directly performing ISSO functions, security architecture design, or leading system authorization efforts for complex, large-scale IT implementations.
- Demonstrated, hands-on experience authoring, updating, and defending security control baselines, System Security Plans (SSPs), and active POA&Ms under NIST SP 800-53 and CMS compliance frameworks—specifically with direct familiarity in CMS ARC-AMPE (Acceptable Risk Controls for ACA, Medicaid, and Partner Entities) or the MARS-E to ARC-AMPE transition; candidates must be comfortable producing clear, audit-ready regulatory documentation as a regular deliverable.
PREFERRED QUALIFICATIONS
- Certifications (Preferred): Active industry certifications such as CISSP, CISM, ISSAP, or Certified Cloud Security Professional (CCSP).
LOCATION
Location: Remote
Only W2
See all 891+ H-1B Visa Senior Information Security Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new H-1B Visa Senior Information Security Analyst Jobs.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as a Senior Information Security Analyst
Map your credentials to SOC code 15-1212
USCIS adjudicators use O*NET occupation profiles to verify specialty occupation status. Pull the 15-1212 profile before interviews so you can align your resume language to the specific knowledge, skills, and degree requirements USCIS expects to see documented.
Filter employers by LCA filing history
Use Migrate Mate to surface employers who have active Labor Condition Applications for information security analyst roles. This filters out companies that claim they sponsor H-1B visas but have no DOL filing history to back it up.
Request the prevailing wage tier in your offer
Ask your recruiter which DOL wage level the LCA will certify at, Level I through Level IV. Senior roles should be certified at Level III or IV. A Level I certification on a senior title raises an RFE risk that affects your timeline.
Verify security clearance sponsorship separately
Federal contractor roles often require a U.S. security clearance that H-1B holders can't always obtain. Confirm clearance eligibility with the hiring manager before the offer stage, not after, so you don't lose time on a role that can't proceed.
Document your incident response and SIEM experience precisely
USCIS may issue an RFE questioning whether the role requires a specific degree rather than general IT experience. Your offer letter and support letter should name tools like SIEM platforms and reference your degree field explicitly, not just job titles.
Negotiate filing before the April 1 cap-subject window
If you're transitioning from OPT or another cap-subject status, your employer must file between April 1 and the registration deadline. Confirm your employer's legal team has filed H-1B petitions before and understands USCIS premium processing timelines for this role category.
H-1B Visa Senior Information Security Analyst: Frequently Asked Questions
Does a Senior Information Security Analyst role qualify as an H-1B specialty occupation?
Yes. USCIS consistently recognizes information security analyst positions as specialty occupations because they require at least a bachelor's degree in computer science, information systems, cybersecurity, or a closely related field. The key is that both the job description and your degree must align. Roles that accept any bachelor's degree regardless of field face higher RFE rates, so the offer letter wording matters.
Which employers sponsor H-1B visas for Senior Information Security Analyst positions?
Employers with active DOL Labor Condition Applications for information security analyst roles are your most reliable targets. Technology companies, financial institutions, healthcare systems, and defense contractors file consistently for this occupation. Migrate Mate lets you browse verified H-1B sponsoring employers filtered specifically for this role, so you can focus your applications where sponsorship is already established.
How does the DOL prevailing wage affect my H-1B offer for this role?
Your employer must certify through an LCA that your salary meets the DOL prevailing wage for your specific job title, experience level, and work location. For a senior-level analyst role, that's typically a Level III or Level IV wage determination. You can verify expected wage floors for your metro area using the OFLC Wage Search before salary negotiations begin.
Can I switch employers on H-1B status if I'm working as a Senior Information Security Analyst?
Yes, through H-1B portability under AC21. Your new employer files an H-1B transfer petition, and you can start working for them once USCIS receives it, without waiting for approval. The new role must still qualify as a specialty occupation at the senior level. If your original petition has been approved for more than 365 days and an I-140 is pending, you may also have additional portability protections.
Does a security clearance requirement affect H-1B sponsorship for this role?
It can. H-1B status doesn't automatically disqualify you from security clearances, but many federal contractor roles require clearances that involve a Foreign National review process, which some employers are unwilling to initiate. Positions at private sector companies, financial firms, and healthcare organizations rarely have clearance requirements and sponsor H-1B visas for this role more straightforwardly. Clarify clearance requirements before accepting an offer.