OPT Information Security Analyst Jobs
Information Security Analyst roles qualify as specialty occupations under OPT, making them strong candidates for H-1B visa sponsorship. Most positions require a degree in cybersecurity, computer science, or information systems. STEM OPT extension eligibility gives you up to 36 months of authorized work, a significant advantage in a field with high employer demand.
Find OPT Information Security Analyst JobsOverview
Showing 5 of 224+ Information Security Analyst jobs
See all 224+ Information Security Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Analyst roles.
Get Access To All JobsResponsibilities:
- Conduct information security risk assessments across applications, IT infrastructure, business processes, projects, and third-party environments.
- Support the maintenance and updating of the Information Security Risk Register, including risk treatment plans, remediation progress, and supporting documentation.
- Perform third-party security reviews and vendor risk assessments in collaboration with Procurement, Legal, Privacy, and business stakeholders.
- Support the development, review, maintenance, and lifecycle management of information security policies, standards, procedures, guidelines, attestations, and exceptions.
- Collect, validate, maintain, and organize compliance and control evidence to support internal audits, external audits, regulatory inspections, and assurance activities.
- Monitor and track risk remediation plans, coordinating follow-up activities with risk owners, control owners, and cross-functional stakeholders.
- Support information security control assessments and effectiveness reviews to evaluate alignment with internal policies, security standards, and regulatory requirements.
- Maintain Governance, Risk, & Compliance documentation, repositories, risk and compliance metrics, dashboards, and reporting materials to support effective governance and management oversight.
- Assist with preparation of executive-level reporting, governance committee presentations, and risk review documentation to communicate information security risks, control gaps, and remediation progress.
- Identify and implement opportunities to enhance GRC processes through standardization, automation, improved documentation, and repeatable workflows.
Qualifications
- Minimum of 3 years of professional experience in information security, cybersecurity governance, IT risk management, regulatory compliance, audit, or a related discipline.
- Bachelor’s degree preferred in Cybersecurity, Information Technology, Information Systems, Business Administration, Risk Management, or a related field.
- Working knowledge of industry-recognized cybersecurity, information security, and risk management frameworks, including NIST CSF 2.0, ISO 27001, CIS Controls, PCI, SOX, FAIR, or comparable standards.
- Experience supporting cybersecurity and IT risk assessments, compliance reviews, internal and external audits, control testing and assurance, third-party risk assessments, and remediation tracking.
- Ability to develop, maintain, and enhance security and risk management documentation, policies, procedures, assessment reports, and stakeholder-ready presentations.
- Relevant industry certifications preferred, including CompTIA Security+, GSEC, SSCP, CISA, CRISC, or equivalent cybersecurity, audit, and risk management certifications.
Here is more information:
Position: Information Security & Compliance Analyst
Term: 12+ month contract
Schedule: Hybrid, 2-3 days per week onsite only Monday-Friday 8am-5pm EST
Location: Boston, MA
Pay: $50-54/hr
Responsibilities:
- Conduct information security risk assessments across applications, IT infrastructure, business processes, projects, and third-party environments.
- Support the maintenance and updating of the Information Security Risk Register, including risk treatment plans, remediation progress, and supporting documentation.
- Perform third-party security reviews and vendor risk assessments in collaboration with Procurement, Legal, Privacy, and business stakeholders.
- Support the development, review, maintenance, and lifecycle management of information security policies, standards, procedures, guidelines, attestations, and exceptions.
- Collect, validate, maintain, and organize compliance and control evidence to support internal audits, external audits, regulatory inspections, and assurance activities.
- Monitor and track risk remediation plans, coordinating follow-up activities with risk owners, control owners, and cross-functional stakeholders.
- Support information security control assessments and effectiveness reviews to evaluate alignment with internal policies, security standards, and regulatory requirements.
- Maintain Governance, Risk, & Compliance documentation, repositories, risk and compliance metrics, dashboards, and reporting materials to support effective governance and management oversight.
- Assist with preparation of executive-level reporting, governance committee presentations, and risk review documentation to communicate information security risks, control gaps, and remediation progress.
- Identify and implement opportunities to enhance GRC processes through standardization, automation, improved documentation, and repeatable workflows.
Qualifications
- Minimum of 3 years of professional experience in information security, cybersecurity governance, IT risk management, regulatory compliance, audit, or a related discipline.
- Bachelor’s degree preferred in Cybersecurity, Information Technology, Information Systems, Business Administration, Risk Management, or a related field.
- Working knowledge of industry-recognized cybersecurity, information security, and risk management frameworks, including NIST CSF 2.0, ISO 27001, CIS Controls, PCI, SOX, FAIR, or comparable standards.
- Experience supporting cybersecurity and IT risk assessments, compliance reviews, internal and external audits, control testing and assurance, third-party risk assessments, and remediation tracking.
- Ability to develop, maintain, and enhance security and risk management documentation, policies, procedures, assessment reports, and stakeholder-ready presentations.
- Relevant industry certifications preferred, including CompTIA Security+, GSEC, SSCP, CISA, CRISC, or equivalent cybersecurity, audit, and risk management certifications.
Here is more information:
Position: Information Security & Compliance Analyst
Term: 12+ month contract
Schedule: Hybrid, 2-3 days per week onsite only Monday-Friday 8am-5pm EST
Location: Boston, MA
Pay: $50-54/hr
See all 224+ OPT Information Security Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT Information Security Analyst Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship as an Information Security Analyst
Target employers with active H-1B filing histories
Large financial institutions, federal contractors, and technology firms file H-1B visa petitions for security analysts regularly. Focusing your search on employers with documented sponsorship histories improves your odds of securing a role that leads to long-term status.
Pursue relevant security certifications before applying
CompTIA Security+, CISSP, and CEH are widely recognized in job postings. Holding at least one certification signals technical readiness and strengthens your case as a specialty occupation worker, which matters when employers evaluate OPT sponsorship decisions.
Clarify your STEM OPT eligibility in your application
Degrees in computer science, information systems, or cybersecurity typically qualify for the 24-month STEM OPT extension. Mentioning your 36 months of total authorization upfront reduces employer hesitation about hiring someone on a shorter work window.
Focus on roles with a clear degree-to-job alignment
H-1B specialty occupation approval depends on your degree field matching the role. Information Security Analyst positions requiring a cybersecurity or IT degree are well-suited. Roles that accept any bachelor's degree regardless of field carry more risk for sponsorship.
Address the timing gap around the H-1B lottery early
The H-1B lottery runs in March for an October 1 start date. If your OPT expires before October, ask employers about cap-exempt options or OPT extension coverage. Having this conversation early prevents surprises late in the hiring process.
Build hands-on experience with in-demand security tools
Employers sponsoring OPT candidates want demonstrated skill, not just coursework. Experience with SIEM platforms, vulnerability scanners, or incident response frameworks makes your profile more compelling and gives employers confidence in investing in your sponsorship.
Information Security Analyst OPT: Frequently Asked Questions
Does an Information Security Analyst role qualify as a STEM OPT job?
Yes. Information Security Analyst is classified under CIP code 11.1003 (Computer and Information Systems Security) and SOC code 15-1212, both of which appear on the STEM Designated Degree Program list. If your degree is in cybersecurity, computer science, or information systems, you're eligible to apply for the 24-month STEM OPT extension, giving you up to 36 months of total work authorization.
Which types of employers are most likely to sponsor Information Security Analysts on OPT?
Federal contractors, financial services firms, healthcare systems, and large technology companies are the most consistent sponsors for this role. These industries face strict compliance and data protection requirements, creating sustained demand for security analysts. You can browse OPT-friendly Information Security Analyst positions on Migrate Mate, which filters for employers open to work authorization sponsorship.
Can I work as a contractor or consultant in cybersecurity on OPT?
OPT requires that your employment be directly related to your degree field, but it does not require a traditional full-time position with a single employer. Contract and consulting arrangements can qualify as long as the work is consistent with your field of study. However, self-employment and staffing agency placements where you work at a third-party client site require careful review with your DSO before accepting.
How does the specialty occupation requirement affect H-1B eligibility for security analysts?
For an H-1B petition to succeed, the employer must demonstrate that the position requires a bachelor's degree or higher in a specific field. Information Security Analyst roles that specify a cybersecurity, computer science, or information systems degree in the job description satisfy this requirement clearly. Roles where the employer accepts any degree regardless of field are harder to approve and may face USCIS scrutiny.
What should I do if my OPT expires before an H-1B cap decision is made?
If you're selected in the H-1B lottery with an October 1 start date but your OPT expires beforehand, you may be eligible for a cap-gap extension that bridges the gap automatically. The cap-gap covers F-1 students whose OPT expires between April 1 and September 30 of the same year the H-1B was filed. Your DSO can issue an updated I-20 reflecting the extension once your employer files the H-1B petition.