OPT Director Of Information Security Jobs
Director of Information Security roles are among the most sponsorship-friendly senior positions for OPT students with cybersecurity, IT governance, or computer science backgrounds. Most require CISSP or equivalent credentials alongside a relevant graduate degree. Your 12-month OPT window can extend to 36 months with a STEM OPT extension if your degree qualifies.
Find OPT Director Of Information Security JobsOverview
Showing 5 of 244+ Director Of Information Security jobs
See all 244+ Director Of Information Security Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Director Of Information Security roles.
Get Access To All JobsJob Description:
We Deliver the Goods: Competitive pay and benefits, including Day 1 Health & Wellness Benefits, Employee Stock Purchase Plan, 401K Employer Matching, Education Assistance, Paid Time Off, and much more
Growth opportunities performing essential work to support America’s food distribution system
Safe and inclusive working environment, including culture of rewards, recognition, and respect
Position Summary:
Performance Food Group is looking for a talented Information Security Analyst to play a key role in supporting Information and Privacy Risk Management aspects of the company as a member of the Information Security Department. PFG is in the midst of establishing a Risk Management function that focuses on identifying, quantifying, communicating, and tracking risks associated with information assets. Reporting to the Manager of Information Security Risk Management and working with IT and line of business stakeholders, the analyst will have a heavy focus on compliance with internal/external policies/statutes, IT Risk Management, and Third Party Risk.
Position Responsibilities:
- Conduct risk assessments and maintain risk register. Perform assessments of IT controls processes, and systems, identifying gaps and opportunities to enhance design/operational effectiveness while reducing the cost of compliance. Conduct periodic readouts and risk reviews with IT teams and segment/line of business stakeholders to convey risk and influence decision making
- Assist in maintaining security exception lifecycle, including qualifying associated risk, determining compensating controls, communicating with IT and LOB stakeholders.
- Assist in development of evaluative risk frameworks for new and emerging technologies, including but not limited to Artificial Intelligence
- Maintain Business Impact Analysis. Work with IT and LOB teams to maintain Business Impact Analysis, establishing risk categorizations for applications and infrastructure based on mission criticality and sensitivity of hosted data.
- Assist in development and implementation of Enterprise Crown Jewels program. Work with IT, LOB teams, and security control owners to define and govern control parameters for critical applications and technologies.
- KPI/KRI Development and Reporting. Assist in development of control-based Key Risk Indicators and Key Performance Indicators across business segments. Assist in developing associated governance model and metric tiers for consumption by various levels of stakeholders, up to and including the Board of Directors.
- Support IT Risk and exception management governance forums across business segments with varying operational models and business context.
- Support PFG’s Third Party Risk Management Program, assessing third parties for inherent and residual risk based on the nature of their services and their ability to appropriately secure PFG data and provide dependent services.
- Negotiate the inclusion of security requirements into third party contract agreements.
- Develop and Maintain IT Audit and Control documentation.
- Support necessary governance forums (committees, working groups) to ensure sound decision-making and stakeholder communications.
- Identify and report on non-compliance with regulatory mandates (i.e. Sarbanes Oxley section 404 PCI DSS, HIPAA, GDPR, CCPA).
- Support operational audits as necessary.
- Performs other related duties as assigned.
Qualifications
- Bachelors Degree
- 1 - 3 Years of experience
- Experience in developing, communicating, and presenting security or risk concepts to varying audiences
- Experience with evaluating AI initiatives through a security risk lens
- Knowledge of regulatory requirements and frameworks
- Development and implementation of security policies
- Experience conducting security maturity assessments
- Development and implementation of security controls
- Strong teamwork and interpersonal skills
- Experience in assisting with process improvement initiatives
- Hold relevant security certifications or willingness to pursue additional certifications
- Continuous learning mindset
- Experience performing IT and security risk assessments, using both qualitative and quantitative methods to identify, quantify, and communicate risk
- Working knowledge of privacy statutes including the European Union General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA)
- Experience with Data Classification, Data Security, and Data Loss Prevention methods and tools, specifically Microsoft Azure Information Protection
- Strong MS Office skills (specifically PowerPoint, Word, Excel, Project, Visio)
- Strong process analysis and engineering skills
- Experience conducting and documenting business impact analysis, designing and implementing Business Continuity/Disaster Recovery plans
- Experience with IT assurance mandates/frameworks such as Sarbanes-Oxley, CobIT
- Demonstrated leadership skills
- Demonstrated high level of analytical and problem-solving skills
- Excellent written and verbal communication skills
- Ability to influence cross functional and highly matrixed business and IT stakeholders
Company description
Performance Food Group is a customer-centric foodservice distribution leader headquartered in Richmond, Va. Grounded by roots that date back to a grocery peddler in 1885, PFG has a nationwide network of approximately 150 distribution centers, 35,000-plus talented associates, and thousands of valued suppliers across the country. With the goal of helping customers thrive, PFG markets and delivers quality food and related products to independent and chain restaurants, schools, business and industry locations, convenience operations, healthcare facilities, vending distributors, office coffee service distributors, big box retailers, and theaters across the U.S.
Performance Food Group and/or its subsidiaries (individually or collectively, the "Company") provides equal employment opportunity (EEO) to all applicants and employees, regardless of race, color, national origin, sex, marital status, pregnancy, sexual orientation, gender identity, religion, age, disability, genetic information, veteran status, and any other characteristic protected by applicable local, state and federal laws and regulations. Please click on the following links to review: (1) our EEO Policy; (2) the "EEO is the Law" poster and supplement; and (3) the Pay Transparency Policy Statement.
Job Description:
We Deliver the Goods: Competitive pay and benefits, including Day 1 Health & Wellness Benefits, Employee Stock Purchase Plan, 401K Employer Matching, Education Assistance, Paid Time Off, and much more
Growth opportunities performing essential work to support America’s food distribution system
Safe and inclusive working environment, including culture of rewards, recognition, and respect
Position Summary:
Performance Food Group is looking for a talented Information Security Analyst to play a key role in supporting Information and Privacy Risk Management aspects of the company as a member of the Information Security Department. PFG is in the midst of establishing a Risk Management function that focuses on identifying, quantifying, communicating, and tracking risks associated with information assets. Reporting to the Manager of Information Security Risk Management and working with IT and line of business stakeholders, the analyst will have a heavy focus on compliance with internal/external policies/statutes, IT Risk Management, and Third Party Risk.
Position Responsibilities:
- Conduct risk assessments and maintain risk register. Perform assessments of IT controls processes, and systems, identifying gaps and opportunities to enhance design/operational effectiveness while reducing the cost of compliance. Conduct periodic readouts and risk reviews with IT teams and segment/line of business stakeholders to convey risk and influence decision making
- Assist in maintaining security exception lifecycle, including qualifying associated risk, determining compensating controls, communicating with IT and LOB stakeholders.
- Assist in development of evaluative risk frameworks for new and emerging technologies, including but not limited to Artificial Intelligence
- Maintain Business Impact Analysis. Work with IT and LOB teams to maintain Business Impact Analysis, establishing risk categorizations for applications and infrastructure based on mission criticality and sensitivity of hosted data.
- Assist in development and implementation of Enterprise Crown Jewels program. Work with IT, LOB teams, and security control owners to define and govern control parameters for critical applications and technologies.
- KPI/KRI Development and Reporting. Assist in development of control-based Key Risk Indicators and Key Performance Indicators across business segments. Assist in developing associated governance model and metric tiers for consumption by various levels of stakeholders, up to and including the Board of Directors.
- Support IT Risk and exception management governance forums across business segments with varying operational models and business context.
- Support PFG’s Third Party Risk Management Program, assessing third parties for inherent and residual risk based on the nature of their services and their ability to appropriately secure PFG data and provide dependent services.
- Negotiate the inclusion of security requirements into third party contract agreements.
- Develop and Maintain IT Audit and Control documentation.
- Support necessary governance forums (committees, working groups) to ensure sound decision-making and stakeholder communications.
- Identify and report on non-compliance with regulatory mandates (i.e. Sarbanes Oxley section 404 PCI DSS, HIPAA, GDPR, CCPA).
- Support operational audits as necessary.
- Performs other related duties as assigned.
Qualifications
- Bachelors Degree
- 1 - 3 Years of experience
- Experience in developing, communicating, and presenting security or risk concepts to varying audiences
- Experience with evaluating AI initiatives through a security risk lens
- Knowledge of regulatory requirements and frameworks
- Development and implementation of security policies
- Experience conducting security maturity assessments
- Development and implementation of security controls
- Strong teamwork and interpersonal skills
- Experience in assisting with process improvement initiatives
- Hold relevant security certifications or willingness to pursue additional certifications
- Continuous learning mindset
- Experience performing IT and security risk assessments, using both qualitative and quantitative methods to identify, quantify, and communicate risk
- Working knowledge of privacy statutes including the European Union General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA)
- Experience with Data Classification, Data Security, and Data Loss Prevention methods and tools, specifically Microsoft Azure Information Protection
- Strong MS Office skills (specifically PowerPoint, Word, Excel, Project, Visio)
- Strong process analysis and engineering skills
- Experience conducting and documenting business impact analysis, designing and implementing Business Continuity/Disaster Recovery plans
- Experience with IT assurance mandates/frameworks such as Sarbanes-Oxley, CobIT
- Demonstrated leadership skills
- Demonstrated high level of analytical and problem-solving skills
- Excellent written and verbal communication skills
- Ability to influence cross functional and highly matrixed business and IT stakeholders
Company description
Performance Food Group is a customer-centric foodservice distribution leader headquartered in Richmond, Va. Grounded by roots that date back to a grocery peddler in 1885, PFG has a nationwide network of approximately 150 distribution centers, 35,000-plus talented associates, and thousands of valued suppliers across the country. With the goal of helping customers thrive, PFG markets and delivers quality food and related products to independent and chain restaurants, schools, business and industry locations, convenience operations, healthcare facilities, vending distributors, office coffee service distributors, big box retailers, and theaters across the U.S.
Performance Food Group and/or its subsidiaries (individually or collectively, the "Company") provides equal employment opportunity (EEO) to all applicants and employees, regardless of race, color, national origin, sex, marital status, pregnancy, sexual orientation, gender identity, religion, age, disability, genetic information, veteran status, and any other characteristic protected by applicable local, state and federal laws and regulations. Please click on the following links to review: (1) our EEO Policy; (2) the "EEO is the Law" poster and supplement; and (3) the Pay Transparency Policy Statement.
See all 244+ OPT Director Of Information Security Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT Director Of Information Security Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship in Director Of Information Security
Lead with your security credentials upfront
Certifications like CISSP, CISM, or CISA signal technical credibility at the director level. List them prominently on your resume and in applications. Hiring managers at this level screen for credentials before reviewing work history.
Target companies with established security programs
Large enterprises in finance, healthcare, and defense already have immigration counsel and structured sponsorship processes. These organizations hire security directors regularly and are far less likely to reject OPT candidates on immigration grounds alone.
Apply during your full OPT window, not the final months
Director-level hiring cycles run long, often three to five months. Starting your search with at least eight months remaining on your OPT authorization gives employers and immigration attorneys enough runway to process sponsorship before your status expires.
Frame your STEM OPT extension as a sponsorship buffer
If your cybersecurity or computer science degree qualifies, your 24-month STEM extension gives employers 36 total months of OPT work authorization. Raise this early in conversations so hiring managers understand the timeline before escalating to their legal team.
Quantify your security program impact in concrete terms
Directors are evaluated on business outcomes, not just technical skills. Translate your experience into measurable results: incidents mitigated, compliance frameworks implemented, or team size managed. This reframes you as a business leader, not just a technical hire.
Identify your E-3 or H-1B pathway before your first interview
Knowing which visa you will pursue after OPT lets you answer sponsorship questions confidently. Director-level roles almost always qualify as specialty occupations, so H-1B visa or E-3 visa are realistic next steps for candidates with the right degree and credentials.
Director Of Information Security OPT: Frequently Asked Questions
Can F-1 OPT students work as a Director of Information Security?
Yes. OPT authorizes F-1 students to work in roles directly related to their field of study, and Director of Information Security positions consistently qualify for graduates in cybersecurity, information systems, or computer science. The role must be in your degree field, so applicants with unrelated degrees may face authorization challenges. Most candidates at this level hold at least a master's degree, which strengthens the connection to the position.
Does a Director of Information Security role qualify for the STEM OPT extension?
It depends on your degree, not the job title. If your degree appears on the official STEM Designated Degree Program list, you can apply for the 24-month STEM OPT extension, giving you 36 months total. Degrees in computer science, information security, and related engineering fields typically qualify. Your employer must also be enrolled in E-Verify, which most large organizations already are.
Will employers sponsor a Director of Information Security for an H-1B or E-3 after OPT?
Director of Information Security roles almost universally qualify as specialty occupations under H-1B requirements because they require a specific bachelor's degree or higher in a relevant technical or business field. Employers who hire at the director level typically have existing relationships with immigration attorneys and are accustomed to sponsoring senior hires. Raising the sponsorship conversation early, before an offer is extended, reduces last-minute complications significantly.
Where can I find Director of Information Security jobs that are open to OPT candidates?
Migrate Mate is built specifically for F-1 OPT and international students seeking visa-friendly roles. You can browse Director of Information Security positions filtered for OPT eligibility without sorting through listings from employers who will not sponsor. Searching a general job board wastes time on roles that screen out international candidates at the resume stage. Migrate Mate surfaces employers with a track record of hiring on OPT or sponsoring visas.
What happens if my OPT expires before an employer completes my H-1B sponsorship?
If you filed your STEM OPT extension application before your initial OPT expired, you receive a 180-day cap-gap extension that keeps you authorized to work while USCIS processes the application. For H-1B sponsorship, your employer needs to file before the April 1 deadline for an October 1 start date. If timing does not align, some employers will consider a temporary unpaid leave arrangement or remote work from outside the U.S. while the petition is pending.