OPT Information Security Specialist Jobs
Information Security Specialist roles qualify for OPT work authorization under CIP code 11.1003 (Computer and Information Systems Security). Most positions require a degree in cybersecurity, computer science, or a related field. STEM designation means you may be eligible for a 24-month OPT extension, giving you up to three years of authorized work experience.
Find OPT Information Security Specialist JobsOverview
Showing 5 of 224+ Information Security Specialist jobs
See all 224+ Information Security Specialist Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Specialist roles.
Get Access To All JobsResponsibilities:
- Conduct information security risk assessments across applications, IT infrastructure, business processes, projects, and third-party environments.
- Support the maintenance and updating of the Information Security Risk Register, including risk treatment plans, remediation progress, and supporting documentation.
- Perform third-party security reviews and vendor risk assessments in collaboration with Procurement, Legal, Privacy, and business stakeholders.
- Support the development, review, maintenance, and lifecycle management of information security policies, standards, procedures, guidelines, attestations, and exceptions.
- Collect, validate, maintain, and organize compliance and control evidence to support internal audits, external audits, regulatory inspections, and assurance activities.
- Monitor and track risk remediation plans, coordinating follow-up activities with risk owners, control owners, and cross-functional stakeholders.
- Support information security control assessments and effectiveness reviews to evaluate alignment with internal policies, security standards, and regulatory requirements.
- Maintain Governance, Risk, & Compliance documentation, repositories, risk and compliance metrics, dashboards, and reporting materials to support effective governance and management oversight.
- Assist with preparation of executive-level reporting, governance committee presentations, and risk review documentation to communicate information security risks, control gaps, and remediation progress.
- Identify and implement opportunities to enhance GRC processes through standardization, automation, improved documentation, and repeatable workflows.
Qualifications
- Minimum of 3 years of professional experience in information security, cybersecurity governance, IT risk management, regulatory compliance, audit, or a related discipline.
- Bachelor’s degree preferred in Cybersecurity, Information Technology, Information Systems, Business Administration, Risk Management, or a related field.
- Working knowledge of industry-recognized cybersecurity, information security, and risk management frameworks, including NIST CSF 2.0, ISO 27001, CIS Controls, PCI, SOX, FAIR, or comparable standards.
- Experience supporting cybersecurity and IT risk assessments, compliance reviews, internal and external audits, control testing and assurance, third-party risk assessments, and remediation tracking.
- Ability to develop, maintain, and enhance security and risk management documentation, policies, procedures, assessment reports, and stakeholder-ready presentations.
- Relevant industry certifications preferred, including CompTIA Security+, GSEC, SSCP, CISA, CRISC, or equivalent cybersecurity, audit, and risk management certifications.
Here is more information:
Position: Information Security & Compliance Analyst
Term: 12+ month contract
Schedule: Hybrid, 2-3 days per week onsite only Monday-Friday 8am-5pm EST
Location: Boston, MA
Pay: $50-54/hr
Responsibilities:
- Conduct information security risk assessments across applications, IT infrastructure, business processes, projects, and third-party environments.
- Support the maintenance and updating of the Information Security Risk Register, including risk treatment plans, remediation progress, and supporting documentation.
- Perform third-party security reviews and vendor risk assessments in collaboration with Procurement, Legal, Privacy, and business stakeholders.
- Support the development, review, maintenance, and lifecycle management of information security policies, standards, procedures, guidelines, attestations, and exceptions.
- Collect, validate, maintain, and organize compliance and control evidence to support internal audits, external audits, regulatory inspections, and assurance activities.
- Monitor and track risk remediation plans, coordinating follow-up activities with risk owners, control owners, and cross-functional stakeholders.
- Support information security control assessments and effectiveness reviews to evaluate alignment with internal policies, security standards, and regulatory requirements.
- Maintain Governance, Risk, & Compliance documentation, repositories, risk and compliance metrics, dashboards, and reporting materials to support effective governance and management oversight.
- Assist with preparation of executive-level reporting, governance committee presentations, and risk review documentation to communicate information security risks, control gaps, and remediation progress.
- Identify and implement opportunities to enhance GRC processes through standardization, automation, improved documentation, and repeatable workflows.
Qualifications
- Minimum of 3 years of professional experience in information security, cybersecurity governance, IT risk management, regulatory compliance, audit, or a related discipline.
- Bachelor’s degree preferred in Cybersecurity, Information Technology, Information Systems, Business Administration, Risk Management, or a related field.
- Working knowledge of industry-recognized cybersecurity, information security, and risk management frameworks, including NIST CSF 2.0, ISO 27001, CIS Controls, PCI, SOX, FAIR, or comparable standards.
- Experience supporting cybersecurity and IT risk assessments, compliance reviews, internal and external audits, control testing and assurance, third-party risk assessments, and remediation tracking.
- Ability to develop, maintain, and enhance security and risk management documentation, policies, procedures, assessment reports, and stakeholder-ready presentations.
- Relevant industry certifications preferred, including CompTIA Security+, GSEC, SSCP, CISA, CRISC, or equivalent cybersecurity, audit, and risk management certifications.
Here is more information:
Position: Information Security & Compliance Analyst
Term: 12+ month contract
Schedule: Hybrid, 2-3 days per week onsite only Monday-Friday 8am-5pm EST
Location: Boston, MA
Pay: $50-54/hr
See all 224+ OPT Information Security Specialist Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT Information Security Specialist Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship as an Information Security Specialist
Target STEM-designated employers first
Many large financial institutions, defense contractors, and tech firms routinely file H-1B visa petitions for security roles. Prioritize employers with a documented history of sponsoring information security specialists, as they already understand the process and budget for it.
Frame your degree field precisely on applications
USCIS ties OPT authorization to your degree's CIP code. Listing your field as cybersecurity or information assurance, rather than generic computer science, strengthens the connection to the Information Security Specialist role and reduces employer compliance concerns.
Obtain relevant certifications before applying
CompTIA Security+, Certified Ethical Hacker, or CISSP Associate credentials signal technical readiness without requiring years of experience. Employers sponsor visa holders they trust to contribute immediately, and certifications close the credibility gap during OPT.
Emphasize clearance eligibility where applicable
Some government-adjacent security roles require security clearances, which non-citizens can obtain under certain conditions. Being transparent about your citizenship status and OPT timeline early avoids late-stage misalignment with employers hiring for clearance-required positions.
Connect OPT end dates to the H-1B cap cycle
H-1B registration opens each March for an October 1 start. Structure your job search timeline so an offer arrives with enough runway to file. Starting your search 12 to 14 months before OPT expires gives employers adequate lead time.
Highlight hands-on technical projects in your application
Penetration testing labs, capture-the-flag competitions, and open-source security tool contributions demonstrate practical skills employers need immediately. Concrete project work makes a stronger sponsorship case than coursework alone, especially when your OPT period is limited.
Information Security Specialist OPT: Frequently Asked Questions
Does an Information Security Specialist role qualify for the 24-month STEM OPT extension?
Yes, if your degree is in a STEM-designated field such as cybersecurity, computer science, or information assurance. Information security roles fall under CIP code 11.1003, which is on the official STEM OPT extension list. Your employer must also be enrolled in E-Verify and sign a formal training plan to qualify.
How do I find Information Security Specialist jobs that sponsor OPT students?
Migrate Mate filters job listings specifically for employers willing to sponsor F-1 OPT and visa candidates, so you are not applying blindly to roles that require existing work authorization. Searching there saves time and surfaces companies that already understand OPT compliance requirements for security roles.
Can I work as an Information Security Specialist on OPT without a security clearance?
Most private-sector information security roles do not require a clearance. Government contractor positions often do, and non-citizens face additional eligibility restrictions. Focus your search on commercial employers in finance, healthcare, and technology, where clearance is rarely a requirement and OPT authorization is straightforward to accommodate.
What degree fields support OPT authorization for Information Security Specialist positions?
Degrees in cybersecurity, information assurance, computer science, computer engineering, and management information systems are the strongest matches. The role must be directly related to your degree field for OPT to apply. Degrees in unrelated fields, even technical ones, can create authorization issues that employers and DSOs need to review carefully.
What happens to my OPT authorization if my Information Security Specialist job ends unexpectedly?
F-1 students on post-completion OPT have a cumulative 90-day unemployment limit for standard OPT and 150 days for the STEM extension period. If your position ends, notify your DSO immediately and begin your job search without delay. Days without employment count against your total even if you are actively applying.