STEM OPT Information Security Analyst Jobs
Information Security Analyst roles qualify for the STEM OPT extension, giving you up to 24 additional months of work authorization beyond your initial OPT period. Your employer must be enrolled in E-Verify, and your degree in computer science, cybersecurity, or a related STEM field must align with the role's CIP code requirements.
Find STEM OPT Information Security Analyst JobsOverview
Showing 5 of 161+ Information Security Analyst jobs
See all 161+ Information Security Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Analyst roles.
Get Access To All JobsDate: Nov 2, 2026
Location: Chicago, IL, US, 60606
Company: National Futures Association
NFA is purpose-driven. We safeguard the integrity of the derivatives markets, protect investors and ensure that our Members meet their regulatory obligations. We take pride in our work; maintain a conviction to do the right thing; empower each other; and support our community. Envision your career in a place where performing critical regulatory work within the financial industry is as significant as the passionate and talented individuals with whom you work.
When you join NFA as a Security Compliance & Risk Manager, you will play a critical role in supporting our mission by strengthening NFA's cybersecurity risk management program—identifying, assessing, tracking and reporting on cybersecurity risks.
Bring your analytical mindset, attention to detail and governance expertise to solve complex challenges and identify areas for continuous improvement. Beginning your first day and throughout your career at NFA, you will partner with Security Compliance team members and stakeholders across the organization to help NFA navigate an increasingly complex cybersecurity landscape.
What you'll do:
As a Security Compliance & Risk Manager, you'll contribute to NFA's important regulatory mission by:
- Supporting security compliance activities, including evidence collection, control validation and audit preparation.
- Participating in planning, performing and documenting cybersecurity control testing activities, including developing remediation plans.
- Supporting the vulnerability management program by tracking identified vulnerabilities through remediation and closure.
- Maintaining risk registers, issue logs and remediation tracking processes.
- Supporting internal and external audits by providing testing results, evidence and compliance documentation.
- Ensuring security documentation is aligned with business requirements, regulatory expectations and industry frameworks.
- Preparing reports, dashboards and presentations for security leadership and stakeholders.
- Contributing to continuous improvement initiatives that enhance security governance, efficiency and effectiveness.
What we're looking for:
We're looking for motivated candidates who are comfortable working independently and communicating with both technical and non-technical stakeholders to complete high-quality work. If you're a highly organized and intellectually curious cybersecurity professional with a passion for driving projects from ideation to completion and meet the qualifications below, we encourage you to apply to join our team as a Security Compliance & Risk Manager.
- Undergraduate degree in cybersecurity, information systems, information technology, risk management, business or a related field, or equivalent experience
- Three to five years of experience in cybersecurity, IT compliance, risk management, audit preparation, control testing, governance or a related discipline
- Familiarity with security frameworks or standards such as NIST, CIS Controls, ISO 27001, or similar
- Understanding of cybersecurity risks, security controls, vulnerability management and compliance concepts
- Knowledge of governance, risk and compliance concepts and processes
- Familiarity with technology such as Microsoft Copilot, Visual Studio Code, reporting dashboards and automation tools
- Experience with ServiceNow or similar workflow and ticketing platforms preferred
- Relevant certifications such as Security+, ISC2 Certified in Cybersecurity (CC), CISA, CRISC, CISSP or similar preferred
The salary range for this position is $112,400 to $159,600.
Customers and market participants depend on NFA to act with integrity and impartiality as it carries out its mission of safeguarding the markets and protecting investors. Therefore, NFA employees have a responsibility to conduct themselves according to high ethical standards, and must abide by NFA's Code of Professional Conduct. Learn more about the Code of Professional Conduct.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.
To learn more about NFA and the benefits we offer please visit: What We Offer | National Futures Association
Nearest Major Market: Chicago
Date: Nov 2, 2026
Location: Chicago, IL, US, 60606
Company: National Futures Association
NFA is purpose-driven. We safeguard the integrity of the derivatives markets, protect investors and ensure that our Members meet their regulatory obligations. We take pride in our work; maintain a conviction to do the right thing; empower each other; and support our community. Envision your career in a place where performing critical regulatory work within the financial industry is as significant as the passionate and talented individuals with whom you work.
When you join NFA as a Security Compliance & Risk Manager, you will play a critical role in supporting our mission by strengthening NFA's cybersecurity risk management program—identifying, assessing, tracking and reporting on cybersecurity risks.
Bring your analytical mindset, attention to detail and governance expertise to solve complex challenges and identify areas for continuous improvement. Beginning your first day and throughout your career at NFA, you will partner with Security Compliance team members and stakeholders across the organization to help NFA navigate an increasingly complex cybersecurity landscape.
What you'll do:
As a Security Compliance & Risk Manager, you'll contribute to NFA's important regulatory mission by:
- Supporting security compliance activities, including evidence collection, control validation and audit preparation.
- Participating in planning, performing and documenting cybersecurity control testing activities, including developing remediation plans.
- Supporting the vulnerability management program by tracking identified vulnerabilities through remediation and closure.
- Maintaining risk registers, issue logs and remediation tracking processes.
- Supporting internal and external audits by providing testing results, evidence and compliance documentation.
- Ensuring security documentation is aligned with business requirements, regulatory expectations and industry frameworks.
- Preparing reports, dashboards and presentations for security leadership and stakeholders.
- Contributing to continuous improvement initiatives that enhance security governance, efficiency and effectiveness.
What we're looking for:
We're looking for motivated candidates who are comfortable working independently and communicating with both technical and non-technical stakeholders to complete high-quality work. If you're a highly organized and intellectually curious cybersecurity professional with a passion for driving projects from ideation to completion and meet the qualifications below, we encourage you to apply to join our team as a Security Compliance & Risk Manager.
- Undergraduate degree in cybersecurity, information systems, information technology, risk management, business or a related field, or equivalent experience
- Three to five years of experience in cybersecurity, IT compliance, risk management, audit preparation, control testing, governance or a related discipline
- Familiarity with security frameworks or standards such as NIST, CIS Controls, ISO 27001, or similar
- Understanding of cybersecurity risks, security controls, vulnerability management and compliance concepts
- Knowledge of governance, risk and compliance concepts and processes
- Familiarity with technology such as Microsoft Copilot, Visual Studio Code, reporting dashboards and automation tools
- Experience with ServiceNow or similar workflow and ticketing platforms preferred
- Relevant certifications such as Security+, ISC2 Certified in Cybersecurity (CC), CISA, CRISC, CISSP or similar preferred
The salary range for this position is $112,400 to $159,600.
Customers and market participants depend on NFA to act with integrity and impartiality as it carries out its mission of safeguarding the markets and protecting investors. Therefore, NFA employees have a responsibility to conduct themselves according to high ethical standards, and must abide by NFA's Code of Professional Conduct. Learn more about the Code of Professional Conduct.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.
To learn more about NFA and the benefits we offer please visit: What We Offer | National Futures Association
Nearest Major Market: Chicago
See all 161+ STEM OPT Information Security Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new STEM OPT Information Security Analyst Jobs.
Get Access To All JobsTips for Finding STEM OPT Authorization as an Information Security Analyst
Verify your CIP code before applying
Cross-check your degree's CIP code against the DHS STEM Designated Degree Program List to confirm it qualifies for the 24-month extension. Cybersecurity and computer science degrees typically qualify, but information systems degrees vary by institution.
Filter jobs by E-Verify status first
Use Migrate Mate to search Information Security Analyst roles filtered by employers enrolled in E-Verify, the legal prerequisite for your STEM OPT extension. Applying to non-enrolled employers wastes your OPT clock on roles that can't authorize you.
Target employers with active security clearance pipelines
Federal contractors and defense firms hiring Information Security Analysts routinely use E-Verify because federal contracts require it. These employers are structurally more likely to be STEM OPT-compliant than startups or small businesses.
Draft your I-983 training plan before the offer stage
Employers unfamiliar with STEM OPT often stall at the I-983 requirement. Arrive at the offer conversation with a draft training plan tied to specific security analyst competencies so your employer can review and sign without delay.
Confirm your role maps to O*NET code 15-1212
Pull the O*NET profile for Information Security Analysts and document how your job duties match the listed tasks and knowledge areas. USCIS and your DSO may request this alignment to validate your training plan during the extension filing.
Request written E-Verify enrollment confirmation early
Ask your recruiter or HR contact for the employer's E-Verify company ID or a screenshot of their enrollment status before you accept an offer. Verbal assurances aren't enough, and your DSO needs documented proof to process your extension application.
Frequently Asked Questions
Does an Information Security Analyst role qualify for the STEM OPT extension?
Yes, Information Security Analyst positions qualify for the 24-month STEM OPT extension when your degree is in a DHS-designated STEM field such as computer science, cybersecurity, or information technology, and your CIP code appears on the STEM Designated Degree Program List. Your DSO will verify the degree-to-role alignment when processing your extension through SEVIS.
How do I confirm my employer is enrolled in E-Verify?
You can search the E-Verify employer search tool by company name to check enrollment status. Enrollment is a strict legal requirement for STEM OPT employers, not optional. If a company isn't listed, they can't legally employ you under the STEM OPT extension, even if they're willing to sign your I-983 training plan. Always verify before accepting an offer.
What goes into the I-983 training plan for an Information Security Analyst?
Your I-983 must describe how the role develops practical skills tied to your STEM degree, including specific learning objectives, supervision structure, and evaluation methods. For Information Security Analysts, this typically covers security operations, risk assessment, vulnerability management, and incident response. Your employer signs the form and your DSO submits it as part of the extension application to USCIS.
What happens to my work authorization if my employer's H-1B petition is selected in the lottery?
If your employer files an H-1B visa petition during your STEM OPT period and it's selected, cap-gap protection automatically extends your OPT work authorization through September 30 of that year while USCIS adjudicates the petition. You don't need to take any action beyond ensuring your employer files before your OPT EAD expires. USCIS guidance covers the specific conditions that apply.
Where can I find Information Security Analyst jobs where the employer is already set up for STEM OPT?
Migrate Mate lets you search Information Security Analyst roles filtered specifically for E-Verify-enrolled employers, so you're not wasting time applying to companies that can't legally authorize your STEM OPT extension. The platform surfaces employers with demonstrated hiring history for international candidates, which reduces the back-and-forth around I-983 compliance at the offer stage.