STEM OPT Information Security Intern Jobs
Information Security Intern roles qualify for STEM OPT when your degree falls under a STEM-designated CIP code, giving you up to 24 months of extended work authorization beyond your initial OPT year. Your employer must be enrolled in E-Verify before you can start, and you'll need a signed I-983 training plan on file with your DSO.
Find STEM OPT Information Security Intern JobsOverview
Showing 5 of 165+ Information Security Intern jobs
See all 165+ Information Security Intern Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Intern roles.
Get Access To All JobsDate: Nov 2, 2026
Location: Chicago, IL, US, 60606
Company: National Futures Association
NFA is purpose-driven. We safeguard the integrity of the derivatives markets, protect investors and ensure that our Members meet their regulatory obligations. We take pride in our work; maintain a conviction to do the right thing; empower each other; and support our community. Envision your career in a place where performing critical regulatory work within the financial industry is as significant as the passionate and talented individuals with whom you work.
When you join NFA as a Security Compliance & Risk Manager, you will play a critical role in supporting our mission by strengthening NFA's cybersecurity risk management program—identifying, assessing, tracking and reporting on cybersecurity risks.
Bring your analytical mindset, attention to detail and governance expertise to solve complex challenges and identify areas for continuous improvement. Beginning your first day and throughout your career at NFA, you will partner with Security Compliance team members and stakeholders across the organization to help NFA navigate an increasingly complex cybersecurity landscape.
What you'll do:
As a Security Compliance & Risk Manager, you'll contribute to NFA's important regulatory mission by:
- Supporting security compliance activities, including evidence collection, control validation and audit preparation.
- Participating in planning, performing and documenting cybersecurity control testing activities, including developing remediation plans.
- Supporting the vulnerability management program by tracking identified vulnerabilities through remediation and closure.
- Maintaining risk registers, issue logs and remediation tracking processes.
- Supporting internal and external audits by providing testing results, evidence and compliance documentation.
- Ensuring security documentation is aligned with business requirements, regulatory expectations and industry frameworks.
- Preparing reports, dashboards and presentations for security leadership and stakeholders.
- Contributing to continuous improvement initiatives that enhance security governance, efficiency and effectiveness.
What we're looking for:
We're looking for motivated candidates who are comfortable working independently and communicating with both technical and non-technical stakeholders to complete high-quality work. If you're a highly organized and intellectually curious cybersecurity professional with a passion for driving projects from ideation to completion and meet the qualifications below, we encourage you to apply to join our team as a Security Compliance & Risk Manager.
- Undergraduate degree in cybersecurity, information systems, information technology, risk management, business or a related field, or equivalent experience
- Three to five years of experience in cybersecurity, IT compliance, risk management, audit preparation, control testing, governance or a related discipline
- Familiarity with security frameworks or standards such as NIST, CIS Controls, ISO 27001, or similar
- Understanding of cybersecurity risks, security controls, vulnerability management and compliance concepts
- Knowledge of governance, risk and compliance concepts and processes
- Familiarity with technology such as Microsoft Copilot, Visual Studio Code, reporting dashboards and automation tools
- Experience with ServiceNow or similar workflow and ticketing platforms preferred
- Relevant certifications such as Security+, ISC2 Certified in Cybersecurity (CC), CISA, CRISC, CISSP or similar preferred
The salary range for this position is $112,400 to $159,600.
Customers and market participants depend on NFA to act with integrity and impartiality as it carries out its mission of safeguarding the markets and protecting investors. Therefore, NFA employees have a responsibility to conduct themselves according to high ethical standards, and must abide by NFA's Code of Professional Conduct. Learn more about the Code of Professional Conduct.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.
To learn more about NFA and the benefits we offer please visit: What We Offer | National Futures Association
Nearest Major Market: Chicago
Date: Nov 2, 2026
Location: Chicago, IL, US, 60606
Company: National Futures Association
NFA is purpose-driven. We safeguard the integrity of the derivatives markets, protect investors and ensure that our Members meet their regulatory obligations. We take pride in our work; maintain a conviction to do the right thing; empower each other; and support our community. Envision your career in a place where performing critical regulatory work within the financial industry is as significant as the passionate and talented individuals with whom you work.
When you join NFA as a Security Compliance & Risk Manager, you will play a critical role in supporting our mission by strengthening NFA's cybersecurity risk management program—identifying, assessing, tracking and reporting on cybersecurity risks.
Bring your analytical mindset, attention to detail and governance expertise to solve complex challenges and identify areas for continuous improvement. Beginning your first day and throughout your career at NFA, you will partner with Security Compliance team members and stakeholders across the organization to help NFA navigate an increasingly complex cybersecurity landscape.
What you'll do:
As a Security Compliance & Risk Manager, you'll contribute to NFA's important regulatory mission by:
- Supporting security compliance activities, including evidence collection, control validation and audit preparation.
- Participating in planning, performing and documenting cybersecurity control testing activities, including developing remediation plans.
- Supporting the vulnerability management program by tracking identified vulnerabilities through remediation and closure.
- Maintaining risk registers, issue logs and remediation tracking processes.
- Supporting internal and external audits by providing testing results, evidence and compliance documentation.
- Ensuring security documentation is aligned with business requirements, regulatory expectations and industry frameworks.
- Preparing reports, dashboards and presentations for security leadership and stakeholders.
- Contributing to continuous improvement initiatives that enhance security governance, efficiency and effectiveness.
What we're looking for:
We're looking for motivated candidates who are comfortable working independently and communicating with both technical and non-technical stakeholders to complete high-quality work. If you're a highly organized and intellectually curious cybersecurity professional with a passion for driving projects from ideation to completion and meet the qualifications below, we encourage you to apply to join our team as a Security Compliance & Risk Manager.
- Undergraduate degree in cybersecurity, information systems, information technology, risk management, business or a related field, or equivalent experience
- Three to five years of experience in cybersecurity, IT compliance, risk management, audit preparation, control testing, governance or a related discipline
- Familiarity with security frameworks or standards such as NIST, CIS Controls, ISO 27001, or similar
- Understanding of cybersecurity risks, security controls, vulnerability management and compliance concepts
- Knowledge of governance, risk and compliance concepts and processes
- Familiarity with technology such as Microsoft Copilot, Visual Studio Code, reporting dashboards and automation tools
- Experience with ServiceNow or similar workflow and ticketing platforms preferred
- Relevant certifications such as Security+, ISC2 Certified in Cybersecurity (CC), CISA, CRISC, CISSP or similar preferred
The salary range for this position is $112,400 to $159,600.
Customers and market participants depend on NFA to act with integrity and impartiality as it carries out its mission of safeguarding the markets and protecting investors. Therefore, NFA employees have a responsibility to conduct themselves according to high ethical standards, and must abide by NFA's Code of Professional Conduct. Learn more about the Code of Professional Conduct.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.
To learn more about NFA and the benefits we offer please visit: What We Offer | National Futures Association
Nearest Major Market: Chicago
See all 165+ STEM OPT Information Security Intern Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new STEM OPT Information Security Intern Jobs.
Get Access To All JobsTips for Finding STEM OPT Authorization as an Information Security Intern
Verify your CIP code covers cybersecurity
Check your official transcript against the DHS STEM Designated Degree Program List before applying. Degrees in Computer Science, Information Assurance, or Electrical Engineering typically qualify, but Information Systems degrees vary by institution and CIP code.
Confirm E-Verify enrollment before accepting offers
Ask the recruiter for the company's E-Verify Company ID or check enrollment status directly through E-Verify before signing anything. An employer who can't provide that ID cannot legally employ you on STEM OPT, regardless of how the offer reads.
Request a security-clearance policy in writing
Many federal contractor roles in information security require clearance eligibility, which non-U.S. citizens cannot obtain. Get the employer's citizenship and clearance requirements in writing before investing time in their interview process.
Map your training plan to SOC code 15-1212
Your I-983 must tie your learning objectives to specific information security tasks. Use O*NET's profile for Information Security Analysts to pull recognized tasks and knowledge areas your supervisor can reference when completing the training plan.
File your STEM OPT extension 90 days early
USCIS recommends submitting your I-765 extension at least 90 days before your initial OPT expires. Your DSO must issue an updated I-20 first, so build that lead time into your job search timeline and don't wait until you have an offer.
Use Migrate Mate to target verified sponsors
Filter your search on Migrate Mate to surface employers with confirmed E-Verify enrollment and active STEM OPT hiring history in security roles. That removes the guesswork of cold-applying to companies that will reject you at the offer stage.
Frequently Asked Questions
Does an Information Security Intern role qualify for the STEM OPT extension?
It qualifies if your underlying degree is on the DHS STEM Designated Degree Program List and the internship maps to a STEM field of study. The role itself doesn't determine eligibility on its own. Your DSO confirms eligibility based on your CIP code when issuing the updated I-20 for the I-765 extension application.
What E-Verify requirement applies to my employer for STEM OPT?
Your employer must be actively enrolled in E-Verify at the worksite where you'll be based before your STEM OPT start date. Enrollment at the company's headquarters doesn't automatically cover a subsidiary or separate office location. Confirm the specific worksite's E-Verify status with HR before your start date, not after.
What should my I-983 training plan include for an information security internship?
The I-983 must describe specific learning objectives tied to your STEM degree, not just your daily job tasks. For an information security role, that means listing skills like network threat analysis, vulnerability assessment, or security operations that directly connect to your degree's coursework. Your supervisor signs off on the plan and must evaluate your progress every six months.
How does cap-gap protection work if my employer files an H-1B petition for me after this internship?
If you're selected in the H-1B lottery and your employer files a timely petition before your OPT EAD expires, cap-gap automatically extends your work authorization through September 30 of that year. You can continue working in the information security role during cap-gap as long as the petition remains pending and your status is maintained.
Where can I find Information Security Intern roles from employers who are already set up for STEM OPT?
Migrate Mate filters listings to show employers with confirmed E-Verify enrollment, which is the baseline requirement for any STEM OPT placement. Searching there saves you from applying to roles where the employer will stall or rescind an offer once they realize the STEM OPT compliance steps they need to complete.