STEM OPT Information Security Engineer Jobs
Information Security Engineer roles sit squarely within STEM OPT eligibility, letting you work for up to 36 months on your F-1 authorization if your employer is enrolled in E-Verify. A STEM degree in computer science, information assurance, or a related CIP-coded field unlocks the 24-month extension. Every employer on this page is verified to hire STEM OPT students.
Find STEM OPT Information Security Engineer JobsOverview
Showing 5 of 160+ Information Security Engineer jobs
See all 160+ Information Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Engineer roles.
Get Access To All JobsDate: Nov 2, 2026
Location: Chicago, IL, US, 60606
Company: National Futures Association
NFA is purpose-driven. We safeguard the integrity of the derivatives markets, protect investors and ensure that our Members meet their regulatory obligations. We take pride in our work; maintain a conviction to do the right thing; empower each other; and support our community. Envision your career in a place where performing critical regulatory work within the financial industry is as significant as the passionate and talented individuals with whom you work.
When you join NFA as a Security Compliance & Risk Manager, you will play a critical role in supporting our mission by strengthening NFA's cybersecurity risk management program—identifying, assessing, tracking and reporting on cybersecurity risks.
Bring your analytical mindset, attention to detail and governance expertise to solve complex challenges and identify areas for continuous improvement. Beginning your first day and throughout your career at NFA, you will partner with Security Compliance team members and stakeholders across the organization to help NFA navigate an increasingly complex cybersecurity landscape.
What you'll do:
As a Security Compliance & Risk Manager, you'll contribute to NFA's important regulatory mission by:
- Supporting security compliance activities, including evidence collection, control validation and audit preparation.
- Participating in planning, performing and documenting cybersecurity control testing activities, including developing remediation plans.
- Supporting the vulnerability management program by tracking identified vulnerabilities through remediation and closure.
- Maintaining risk registers, issue logs and remediation tracking processes.
- Supporting internal and external audits by providing testing results, evidence and compliance documentation.
- Ensuring security documentation is aligned with business requirements, regulatory expectations and industry frameworks.
- Preparing reports, dashboards and presentations for security leadership and stakeholders.
- Contributing to continuous improvement initiatives that enhance security governance, efficiency and effectiveness.
What we're looking for:
We're looking for motivated candidates who are comfortable working independently and communicating with both technical and non-technical stakeholders to complete high-quality work. If you're a highly organized and intellectually curious cybersecurity professional with a passion for driving projects from ideation to completion and meet the qualifications below, we encourage you to apply to join our team as a Security Compliance & Risk Manager.
- Undergraduate degree in cybersecurity, information systems, information technology, risk management, business or a related field, or equivalent experience
- Three to five years of experience in cybersecurity, IT compliance, risk management, audit preparation, control testing, governance or a related discipline
- Familiarity with security frameworks or standards such as NIST, CIS Controls, ISO 27001, or similar
- Understanding of cybersecurity risks, security controls, vulnerability management and compliance concepts
- Knowledge of governance, risk and compliance concepts and processes
- Familiarity with technology such as Microsoft Copilot, Visual Studio Code, reporting dashboards and automation tools
- Experience with ServiceNow or similar workflow and ticketing platforms preferred
- Relevant certifications such as Security+, ISC2 Certified in Cybersecurity (CC), CISA, CRISC, CISSP or similar preferred
The salary range for this position is $112,400 to $159,600.
Customers and market participants depend on NFA to act with integrity and impartiality as it carries out its mission of safeguarding the markets and protecting investors. Therefore, NFA employees have a responsibility to conduct themselves according to high ethical standards, and must abide by NFA's Code of Professional Conduct. Learn more about the Code of Professional Conduct.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.
To learn more about NFA and the benefits we offer please visit: What We Offer | National Futures Association
Nearest Major Market: Chicago
Date: Nov 2, 2026
Location: Chicago, IL, US, 60606
Company: National Futures Association
NFA is purpose-driven. We safeguard the integrity of the derivatives markets, protect investors and ensure that our Members meet their regulatory obligations. We take pride in our work; maintain a conviction to do the right thing; empower each other; and support our community. Envision your career in a place where performing critical regulatory work within the financial industry is as significant as the passionate and talented individuals with whom you work.
When you join NFA as a Security Compliance & Risk Manager, you will play a critical role in supporting our mission by strengthening NFA's cybersecurity risk management program—identifying, assessing, tracking and reporting on cybersecurity risks.
Bring your analytical mindset, attention to detail and governance expertise to solve complex challenges and identify areas for continuous improvement. Beginning your first day and throughout your career at NFA, you will partner with Security Compliance team members and stakeholders across the organization to help NFA navigate an increasingly complex cybersecurity landscape.
What you'll do:
As a Security Compliance & Risk Manager, you'll contribute to NFA's important regulatory mission by:
- Supporting security compliance activities, including evidence collection, control validation and audit preparation.
- Participating in planning, performing and documenting cybersecurity control testing activities, including developing remediation plans.
- Supporting the vulnerability management program by tracking identified vulnerabilities through remediation and closure.
- Maintaining risk registers, issue logs and remediation tracking processes.
- Supporting internal and external audits by providing testing results, evidence and compliance documentation.
- Ensuring security documentation is aligned with business requirements, regulatory expectations and industry frameworks.
- Preparing reports, dashboards and presentations for security leadership and stakeholders.
- Contributing to continuous improvement initiatives that enhance security governance, efficiency and effectiveness.
What we're looking for:
We're looking for motivated candidates who are comfortable working independently and communicating with both technical and non-technical stakeholders to complete high-quality work. If you're a highly organized and intellectually curious cybersecurity professional with a passion for driving projects from ideation to completion and meet the qualifications below, we encourage you to apply to join our team as a Security Compliance & Risk Manager.
- Undergraduate degree in cybersecurity, information systems, information technology, risk management, business or a related field, or equivalent experience
- Three to five years of experience in cybersecurity, IT compliance, risk management, audit preparation, control testing, governance or a related discipline
- Familiarity with security frameworks or standards such as NIST, CIS Controls, ISO 27001, or similar
- Understanding of cybersecurity risks, security controls, vulnerability management and compliance concepts
- Knowledge of governance, risk and compliance concepts and processes
- Familiarity with technology such as Microsoft Copilot, Visual Studio Code, reporting dashboards and automation tools
- Experience with ServiceNow or similar workflow and ticketing platforms preferred
- Relevant certifications such as Security+, ISC2 Certified in Cybersecurity (CC), CISA, CRISC, CISSP or similar preferred
The salary range for this position is $112,400 to $159,600.
Customers and market participants depend on NFA to act with integrity and impartiality as it carries out its mission of safeguarding the markets and protecting investors. Therefore, NFA employees have a responsibility to conduct themselves according to high ethical standards, and must abide by NFA's Code of Professional Conduct. Learn more about the Code of Professional Conduct.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.
To learn more about NFA and the benefits we offer please visit: What We Offer | National Futures Association
Nearest Major Market: Chicago
See all 160+ STEM OPT Information Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new STEM OPT Information Security Engineer Jobs.
Get Access To All JobsTips for Finding STEM OPT Authorization as an Information Security Engineer
Confirm your CIP code before applying
Pull up your transcript and cross-reference your degree's Classification of Instructional Programs code against the DHS STEM OPT designated degree list. Computer science, cybersecurity, and information assurance CIP codes all qualify, but information systems codes sometimes don't.
Screen employers for E-Verify enrollment first
Before any application, look up the employer in the E-Verify employer search tool to confirm active enrollment. An employer that isn't enrolled cannot legally hire you on STEM OPT, and retroactive enrollment after your start date won't satisfy the requirement.
Draft your I-983 training plan before offer stage
Security engineers often cover multiple domains like penetration testing, incident response, and cloud security. Map each responsibility to a specific learning objective in your I-983 draft now so negotiations over job duties don't delay your DSO's signature later.
Search Migrate Mate to filter verified STEM OPT employers
Use Migrate Mate to browse Information Security Engineer roles at employers already confirmed to hire STEM OPT students. Filtering by E-Verify status at the search stage saves you from pursuing leads that will stall at the authorization check.
Target companies with active security clearance pipelines
Defense contractors and federal IT vendors frequently hire information security engineers and tend to maintain continuous E-Verify enrollment as a government contracting requirement. That institutional enrollment habit reduces the risk of a last-minute E-Verify gap on your start date.
Negotiate your start date around OPT cap-gap timing
If your initial OPT expires while an H-1B visa petition is pending, the cap-gap rule extends your work authorization through September 30. Confirm with your DSO that your Information Security Engineer offer letter start date falls within that protected window before signing.
Frequently Asked Questions
Does an Information Security Engineer role qualify for STEM OPT?
Yes, if your underlying degree carries a qualifying CIP code. Degrees in computer science, cybersecurity, information assurance, and electrical engineering are on the DHS STEM designated degree list and support the 24-month STEM OPT extension. General information systems or business IT degrees may not qualify, so verify your specific CIP code with your DSO before accepting an offer.
What does the E-Verify requirement mean for my job search?
Every employer who hires you on STEM OPT must be enrolled in E-Verify for the specific site where you'll work. You can confirm enrollment through the E-Verify employer search tool before applying. If an employer is not enrolled, they cannot sponsor your STEM OPT extension regardless of how qualified you are. Use Migrate Mate to find Information Security Engineer roles at employers who already meet this requirement.
How does the I-983 training plan work for information security roles?
Your employer and DSO co-sign the I-983, which documents the formal training relationship between your security engineering duties and your STEM degree. You and your supervisor must complete a self-evaluation every six months and a full evaluation at the end of the training period. Information security roles with duties spread across multiple domains, such as cloud security, compliance, and incident response, require each area to be reflected in the I-983 learning objectives.
Can I switch employers mid-STEM OPT if I get a better security engineering offer?
Yes, but the transition requires your DSO to update your I-20 to reflect the new employer before your last day at the current job. The new employer must also be enrolled in E-Verify and willing to co-sign a revised I-983 training plan. There's no grace period between employers on STEM OPT, so the paperwork must be completed before your first day at the new company.
What happens to my STEM OPT authorization if an H-1B is filed on my behalf?
If your employer files an H-1B petition before your OPT expires and it's selected in the lottery, the cap-gap rule automatically extends your work authorization through September 30 of that year. You can keep working as an Information Security Engineer throughout that period without any interruption. USCIS issues a cap-gap extension automatically when the petition is timely filed, but confirm the status with your DSO so your I-20 reflects the extension correctly.