OPT Information Security Intern Jobs
Information Security Intern roles are among the most OPT-friendly positions in tech, with employers regularly filing H-1B visa petitions for strong interns. Your 12-month OPT window, or 24-month STEM extension if your degree qualifies, gives you enough runway to prove your value and convert to full-time sponsorship.
Find OPT Information Security Intern JobsOverview
Showing 5 of 244+ Information Security Intern jobs
See all 244+ Information Security Intern Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Intern roles.
Get Access To All JobsJob Description:
We Deliver the Goods: Competitive pay and benefits, including Day 1 Health & Wellness Benefits, Employee Stock Purchase Plan, 401K Employer Matching, Education Assistance, Paid Time Off, and much more
Growth opportunities performing essential work to support America’s food distribution system
Safe and inclusive working environment, including culture of rewards, recognition, and respect
Position Summary:
Performance Food Group is looking for a talented Information Security Analyst to play a key role in supporting Information and Privacy Risk Management aspects of the company as a member of the Information Security Department. PFG is in the midst of establishing a Risk Management function that focuses on identifying, quantifying, communicating, and tracking risks associated with information assets. Reporting to the Manager of Information Security Risk Management and working with IT and line of business stakeholders, the analyst will have a heavy focus on compliance with internal/external policies/statutes, IT Risk Management, and Third Party Risk.
Position Responsibilities:
- Conduct risk assessments and maintain risk register. Perform assessments of IT controls processes, and systems, identifying gaps and opportunities to enhance design/operational effectiveness while reducing the cost of compliance. Conduct periodic readouts and risk reviews with IT teams and segment/line of business stakeholders to convey risk and influence decision making
- Assist in maintaining security exception lifecycle, including qualifying associated risk, determining compensating controls, communicating with IT and LOB stakeholders.
- Assist in development of evaluative risk frameworks for new and emerging technologies, including but not limited to Artificial Intelligence
- Maintain Business Impact Analysis. Work with IT and LOB teams to maintain Business Impact Analysis, establishing risk categorizations for applications and infrastructure based on mission criticality and sensitivity of hosted data.
- Assist in development and implementation of Enterprise Crown Jewels program. Work with IT, LOB teams, and security control owners to define and govern control parameters for critical applications and technologies.
- KPI/KRI Development and Reporting. Assist in development of control-based Key Risk Indicators and Key Performance Indicators across business segments. Assist in developing associated governance model and metric tiers for consumption by various levels of stakeholders, up to and including the Board of Directors.
- Support IT Risk and exception management governance forums across business segments with varying operational models and business context.
- Support PFG’s Third Party Risk Management Program, assessing third parties for inherent and residual risk based on the nature of their services and their ability to appropriately secure PFG data and provide dependent services.
- Negotiate the inclusion of security requirements into third party contract agreements.
- Develop and Maintain IT Audit and Control documentation.
- Support necessary governance forums (committees, working groups) to ensure sound decision-making and stakeholder communications.
- Identify and report on non-compliance with regulatory mandates (i.e. Sarbanes Oxley section 404 PCI DSS, HIPAA, GDPR, CCPA).
- Support operational audits as necessary.
- Performs other related duties as assigned.
Qualifications
- Bachelors Degree
- 1 - 3 Years of experience
- Experience in developing, communicating, and presenting security or risk concepts to varying audiences
- Experience with evaluating AI initiatives through a security risk lens
- Knowledge of regulatory requirements and frameworks
- Development and implementation of security policies
- Experience conducting security maturity assessments
- Development and implementation of security controls
- Strong teamwork and interpersonal skills
- Experience in assisting with process improvement initiatives
- Hold relevant security certifications or willingness to pursue additional certifications
- Continuous learning mindset
- Experience performing IT and security risk assessments, using both qualitative and quantitative methods to identify, quantify, and communicate risk
- Working knowledge of privacy statutes including the European Union General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA)
- Experience with Data Classification, Data Security, and Data Loss Prevention methods and tools, specifically Microsoft Azure Information Protection
- Strong MS Office skills (specifically PowerPoint, Word, Excel, Project, Visio)
- Strong process analysis and engineering skills
- Experience conducting and documenting business impact analysis, designing and implementing Business Continuity/Disaster Recovery plans
- Experience with IT assurance mandates/frameworks such as Sarbanes-Oxley, CobIT
- Demonstrated leadership skills
- Demonstrated high level of analytical and problem-solving skills
- Excellent written and verbal communication skills
- Ability to influence cross functional and highly matrixed business and IT stakeholders
Company description
Performance Food Group is a customer-centric foodservice distribution leader headquartered in Richmond, Va. Grounded by roots that date back to a grocery peddler in 1885, PFG has a nationwide network of approximately 150 distribution centers, 35,000-plus talented associates, and thousands of valued suppliers across the country. With the goal of helping customers thrive, PFG markets and delivers quality food and related products to independent and chain restaurants, schools, business and industry locations, convenience operations, healthcare facilities, vending distributors, office coffee service distributors, big box retailers, and theaters across the U.S.
Performance Food Group and/or its subsidiaries (individually or collectively, the "Company") provides equal employment opportunity (EEO) to all applicants and employees, regardless of race, color, national origin, sex, marital status, pregnancy, sexual orientation, gender identity, religion, age, disability, genetic information, veteran status, and any other characteristic protected by applicable local, state and federal laws and regulations. Please click on the following links to review: (1) our EEO Policy; (2) the "EEO is the Law" poster and supplement; and (3) the Pay Transparency Policy Statement.
Job Description:
We Deliver the Goods: Competitive pay and benefits, including Day 1 Health & Wellness Benefits, Employee Stock Purchase Plan, 401K Employer Matching, Education Assistance, Paid Time Off, and much more
Growth opportunities performing essential work to support America’s food distribution system
Safe and inclusive working environment, including culture of rewards, recognition, and respect
Position Summary:
Performance Food Group is looking for a talented Information Security Analyst to play a key role in supporting Information and Privacy Risk Management aspects of the company as a member of the Information Security Department. PFG is in the midst of establishing a Risk Management function that focuses on identifying, quantifying, communicating, and tracking risks associated with information assets. Reporting to the Manager of Information Security Risk Management and working with IT and line of business stakeholders, the analyst will have a heavy focus on compliance with internal/external policies/statutes, IT Risk Management, and Third Party Risk.
Position Responsibilities:
- Conduct risk assessments and maintain risk register. Perform assessments of IT controls processes, and systems, identifying gaps and opportunities to enhance design/operational effectiveness while reducing the cost of compliance. Conduct periodic readouts and risk reviews with IT teams and segment/line of business stakeholders to convey risk and influence decision making
- Assist in maintaining security exception lifecycle, including qualifying associated risk, determining compensating controls, communicating with IT and LOB stakeholders.
- Assist in development of evaluative risk frameworks for new and emerging technologies, including but not limited to Artificial Intelligence
- Maintain Business Impact Analysis. Work with IT and LOB teams to maintain Business Impact Analysis, establishing risk categorizations for applications and infrastructure based on mission criticality and sensitivity of hosted data.
- Assist in development and implementation of Enterprise Crown Jewels program. Work with IT, LOB teams, and security control owners to define and govern control parameters for critical applications and technologies.
- KPI/KRI Development and Reporting. Assist in development of control-based Key Risk Indicators and Key Performance Indicators across business segments. Assist in developing associated governance model and metric tiers for consumption by various levels of stakeholders, up to and including the Board of Directors.
- Support IT Risk and exception management governance forums across business segments with varying operational models and business context.
- Support PFG’s Third Party Risk Management Program, assessing third parties for inherent and residual risk based on the nature of their services and their ability to appropriately secure PFG data and provide dependent services.
- Negotiate the inclusion of security requirements into third party contract agreements.
- Develop and Maintain IT Audit and Control documentation.
- Support necessary governance forums (committees, working groups) to ensure sound decision-making and stakeholder communications.
- Identify and report on non-compliance with regulatory mandates (i.e. Sarbanes Oxley section 404 PCI DSS, HIPAA, GDPR, CCPA).
- Support operational audits as necessary.
- Performs other related duties as assigned.
Qualifications
- Bachelors Degree
- 1 - 3 Years of experience
- Experience in developing, communicating, and presenting security or risk concepts to varying audiences
- Experience with evaluating AI initiatives through a security risk lens
- Knowledge of regulatory requirements and frameworks
- Development and implementation of security policies
- Experience conducting security maturity assessments
- Development and implementation of security controls
- Strong teamwork and interpersonal skills
- Experience in assisting with process improvement initiatives
- Hold relevant security certifications or willingness to pursue additional certifications
- Continuous learning mindset
- Experience performing IT and security risk assessments, using both qualitative and quantitative methods to identify, quantify, and communicate risk
- Working knowledge of privacy statutes including the European Union General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA)
- Experience with Data Classification, Data Security, and Data Loss Prevention methods and tools, specifically Microsoft Azure Information Protection
- Strong MS Office skills (specifically PowerPoint, Word, Excel, Project, Visio)
- Strong process analysis and engineering skills
- Experience conducting and documenting business impact analysis, designing and implementing Business Continuity/Disaster Recovery plans
- Experience with IT assurance mandates/frameworks such as Sarbanes-Oxley, CobIT
- Demonstrated leadership skills
- Demonstrated high level of analytical and problem-solving skills
- Excellent written and verbal communication skills
- Ability to influence cross functional and highly matrixed business and IT stakeholders
Company description
Performance Food Group is a customer-centric foodservice distribution leader headquartered in Richmond, Va. Grounded by roots that date back to a grocery peddler in 1885, PFG has a nationwide network of approximately 150 distribution centers, 35,000-plus talented associates, and thousands of valued suppliers across the country. With the goal of helping customers thrive, PFG markets and delivers quality food and related products to independent and chain restaurants, schools, business and industry locations, convenience operations, healthcare facilities, vending distributors, office coffee service distributors, big box retailers, and theaters across the U.S.
Performance Food Group and/or its subsidiaries (individually or collectively, the "Company") provides equal employment opportunity (EEO) to all applicants and employees, regardless of race, color, national origin, sex, marital status, pregnancy, sexual orientation, gender identity, religion, age, disability, genetic information, veteran status, and any other characteristic protected by applicable local, state and federal laws and regulations. Please click on the following links to review: (1) our EEO Policy; (2) the "EEO is the Law" poster and supplement; and (3) the Pay Transparency Policy Statement.
See all 244+ OPT Information Security Intern Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT Information Security Intern Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship as an Information Security Intern
Prioritize employers with active H-1B histories
Companies that regularly sponsor H-1B visas for security roles are your best bet for long-term sponsorship. Check USCIS disclosure data for past H-1B visa filings in information security before applying to any internship.
Highlight your STEM degree field explicitly
If your degree is in computer science, cybersecurity, or a related STEM field, say so clearly in your resume and cover letter. This signals STEM OPT extension eligibility and makes sponsorship conversations easier for HR.
Get certifications that reduce employer risk
CompTIA Security+, CEH, or Google Cybersecurity Certificate demonstrate verified skills to employers unfamiliar with OPT. Certified interns face fewer sponsorship objections because employers see concrete, measurable qualifications beyond your degree alone.
Raise sponsorship early, not at offer time
Mention your OPT status in the first recruiter screen, not after an offer is extended. Employers who cannot sponsor will tell you immediately, saving weeks of time you could spend on receptive opportunities.
Target mid-size tech and defense contractors
Mid-size cybersecurity firms and defense contractors often hire OPT interns with conversion intent. They face talent shortages in security roles and have established immigration counsel, making the sponsorship process smoother than smaller startups.
Document your work authorization dates precisely
Know your OPT start date, expiration date, and STEM extension eligibility before every interview. Employers appreciate candidates who can answer work authorization questions confidently and without hesitation during recruiter screening calls.
Information Security Intern OPT: Frequently Asked Questions
Can I work as an Information Security Intern on OPT without employer sponsorship?
Yes. OPT work authorization is tied to your F-1 status, not to employer sponsorship. Your employer does not file anything with USCIS to hire you as an OPT intern. However, if you want to stay in the U.S. after your OPT expires, the employer will need to sponsor an H-1B or another visa. That future sponsorship question is what most employers are actually evaluating.
Do Information Security Intern roles qualify for the 24-month STEM OPT extension?
They often do, but it depends on your degree, not the job title. If your degree is in computer science, information technology, cybersecurity, or another qualifying STEM field on the DHS STEM Designated Degree Program List, and your employer is enrolled in E-Verify, you can apply for the 24-month extension. Confirm both conditions before accepting any offer.
How far in advance should I start applying for Information Security Intern roles on OPT?
Start applying three to four months before your intended start date. Security intern roles frequently require background checks, and some positions at defense contractors or financial institutions require security clearance processing, which adds weeks to the hiring timeline. Beginning early also gives you buffer time if your DSO needs to update your SEVIS record before your OPT start date.
Where can I find Information Security Intern jobs that are open to OPT students?
Migrate Mate is built specifically for F-1 OPT students and filters roles by OPT and STEM OPT eligibility. Browsing on Migrate Mate saves time you would otherwise spend screening job listings that exclude candidates requiring future sponsorship. You can filter directly for security internships with employers who have sponsored visas before.
Will a security clearance requirement disqualify me as an OPT student?
Positions requiring an active clearance are generally not available to non-U.S. citizens and will disqualify OPT students. However, many Information Security Intern roles at private companies are clearance-eligible, not clearance-required, meaning the employer can sponsor your clearance later once you obtain a longer-term visa status. Read job descriptions carefully and look for the phrase 'must be a U.S. citizen' as the clearest disqualifier.