Information Security Manager Jobs in USA with Visa Sponsorship
Information Security Manager roles attract strong H-1B visa sponsorship from financial services, healthcare, and tech employers. Most require a bachelor's degree in computer science or cybersecurity, and relevant certifications like CISSP or CISM significantly strengthen your petition. For detailed occupation requirements, see the O*NET profile.
Find Information Security Manager JobsOverview
Showing 5 of 3,931+ Information Security Manager jobs
See all 3,931+ Information Security Manager Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Manager roles.
Get Access To All JobsOverview:
This role is for someone who likes doing a lot of different things well. Our Information Security & Compliance team is small, so governance, audit, and risk aren’t separate lanes here. You’ll work across policy management, SOC 2 and other audits, risk management, and vendor risk, and you’ll see how all of it connects, which is experience you won’t get in a role that covers only one piece.
You’ll be the right hand to our VP of Information Security & Compliance, with a real path to grow into broader security leadership. You’ll own the compliance process day to day, work hands-on across audits, policy, and risk, mentor a junior teammate, and talk through risks with engineering, IT, and the business. Our customers are large utilities and energy companies that run billions in regulated assets on our SaaS platform, so they ask hard questions about how we protect it, and you’ll help us answer them.
Responsibilities:
Success will be measured by audits that go smoothly, policies and risks that are well managed, and leadership that always knows where we stand. Audits, policy, and risk management are the heart of the job. That looks like:
- Facilitating our SOC 1 and SOC 2 attestations and other external audits from scoping through fieldwork, so evidence arrives on time and audit readiness is a year-round habit, not a scramble.
- Owning information security policy governance, with clear owners, a steady review cadence, and records an auditor can follow.
- Running our enterprise security risk program, and explaining why each risk matters in plain security and SaaS terms, so every risk has an owner, a plan, and a date.
- Managing vendor risk assessments and helping choose and set up the GRC tooling (think Drata, Vanta, Full Circle, or UpGuard) that makes the whole team more effective.
- Reporting program health to leadership and partnering with CloudOps, IT, and Dev, while supporting security awareness training, customer questionnaires, and incident response.
- Mentoring a junior teammate along the way and helping shape how the team grows.
QUALIFICATIONS
- You’ve worked in the SaaS industry and understand software and cloud environments well enough to talk through risk with engineers.
- You’ve facilitated audits such as SOC 2, ISO 27001, or NIST CSF 2.0 (FedRAMP experience counts too).
- You have eight or more years in cybersecurity compliance, audit, or risk management.
- You can talk across security domains and explain why a risk matters to an engineer or an executive.
- You like wearing a lot of hats. Maybe you started in a smaller organization and covered it all, or you’ve built deep governance expertise somewhere larger. Either path works.
PowerPlan is an EOE
Applicant Privacy Notice
Please note that this is a hybrid role that involves a combination of onsite work from our corporate office as well as work from home. While we strive to accommodate flexible working arrangements when sensible, there will be times when onsite work is required. This could include scheduled office days, team meetings, client meetings, or special events.
Overview:
This role is for someone who likes doing a lot of different things well. Our Information Security & Compliance team is small, so governance, audit, and risk aren’t separate lanes here. You’ll work across policy management, SOC 2 and other audits, risk management, and vendor risk, and you’ll see how all of it connects, which is experience you won’t get in a role that covers only one piece.
You’ll be the right hand to our VP of Information Security & Compliance, with a real path to grow into broader security leadership. You’ll own the compliance process day to day, work hands-on across audits, policy, and risk, mentor a junior teammate, and talk through risks with engineering, IT, and the business. Our customers are large utilities and energy companies that run billions in regulated assets on our SaaS platform, so they ask hard questions about how we protect it, and you’ll help us answer them.
Responsibilities:
Success will be measured by audits that go smoothly, policies and risks that are well managed, and leadership that always knows where we stand. Audits, policy, and risk management are the heart of the job. That looks like:
- Facilitating our SOC 1 and SOC 2 attestations and other external audits from scoping through fieldwork, so evidence arrives on time and audit readiness is a year-round habit, not a scramble.
- Owning information security policy governance, with clear owners, a steady review cadence, and records an auditor can follow.
- Running our enterprise security risk program, and explaining why each risk matters in plain security and SaaS terms, so every risk has an owner, a plan, and a date.
- Managing vendor risk assessments and helping choose and set up the GRC tooling (think Drata, Vanta, Full Circle, or UpGuard) that makes the whole team more effective.
- Reporting program health to leadership and partnering with CloudOps, IT, and Dev, while supporting security awareness training, customer questionnaires, and incident response.
- Mentoring a junior teammate along the way and helping shape how the team grows.
QUALIFICATIONS
- You’ve worked in the SaaS industry and understand software and cloud environments well enough to talk through risk with engineers.
- You’ve facilitated audits such as SOC 2, ISO 27001, or NIST CSF 2.0 (FedRAMP experience counts too).
- You have eight or more years in cybersecurity compliance, audit, or risk management.
- You can talk across security domains and explain why a risk matters to an engineer or an executive.
- You like wearing a lot of hats. Maybe you started in a smaller organization and covered it all, or you’ve built deep governance expertise somewhere larger. Either path works.
PowerPlan is an EOE
Applicant Privacy Notice
Please note that this is a hybrid role that involves a combination of onsite work from our corporate office as well as work from home. While we strive to accommodate flexible working arrangements when sensible, there will be times when onsite work is required. This could include scheduled office days, team meetings, client meetings, or special events.
See all 3,931+ Information Security Manager Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Manager roles.
Get Access To All JobsTips for Finding Visa Sponsorship as an Information Security Manager
Lead with certifications on your resume
CISSP, CISM, and CISA certifications signal specialty occupation eligibility to both employers and USCIS. Petitions supported by industry credentials alongside a qualifying degree face fewer RFEs during adjudication.
Target regulated industries first
Banks, hospitals, and federal contractors face mandatory compliance frameworks like SOX, HIPAA, and FedRAMP. These organizations sponsor H-1B visas more consistently because security leadership is legally required, not discretionary.
Frame your degree field precisely
USCIS scrutinizes specialty occupation claims for management-adjacent roles. A degree in computer science, information systems, or cybersecurity maps more cleanly to this title than a general business or IT degree.
Document your technical scope, not just team size
Sponsorship petitions succeed when job duties demonstrate technical complexity. Highlight architecture decisions, incident response ownership, and security tool implementation rather than headcount or budget managed.
Ask about sponsorship before the final interview round
Many employers sponsor but don't advertise it. Raising sponsorship after an offer creates friction. Asking during a second-round conversation, once mutual interest is established, gives both sides time to align on process.
Use Migrate Mate to filter for verified sponsors
Not every posting that says 'visa sponsorship available' follows through. Migrate Mate surfaces employers with confirmed H-1B filing history for security roles, saving you from applying to companies that won't actually sponsor.
Frequently Asked Questions
Does Information Security Manager qualify as a specialty occupation for H-1B purposes?
Yes, but the petition needs to be drafted carefully. USCIS may question whether a management role requires a specific bachelor's degree. The strongest petitions document that the position demands theoretical and practical application of computer science, information security, or a directly related field, not just general business acumen. Roles with hands-on technical duties and a degree requirement written into the job description are approved more consistently.
Which visa categories are commonly used to sponsor Information Security Managers?
H-1B visa is the most common path for employer-sponsored security managers. Candidates with extraordinary achievement in cybersecurity, such as published research, national awards, or a record of leading high-profile breach responses, may qualify for O-1A. L-1A is an option for managers transferring from a foreign affiliate. Australian citizens can pursue the E-3 visa, which has no lottery and renews indefinitely.
How do I find employers that actually sponsor H-1B visas for security manager roles?
Migrate Mate filters job listings by confirmed sponsorship history, so you're not guessing based on vague job description language. Look for employers in financial services, healthcare systems, defense contractors, and large technology companies. These sectors hire security managers at scale and have established immigration programs, meaning fewer delays and more experienced HR teams handling the petition process.
Does experience substitute for a degree when applying for H-1B sponsorship as a security manager?
USCIS allows three years of specialized experience to substitute for one year of a bachelor's degree, meaning 12 years of directly relevant experience can stand in for a four-year degree. In practice, approvals on experience-only petitions for management roles face higher RFE rates. Pairing substantial experience with an associate's degree or professional certifications like CISSP creates a stronger combined record than experience alone.
What is the H-1B approval rate for Information Security Manager roles?
USCIS doesn't publish approval rates by job title, but cybersecurity and IT management roles generally see approval rates above 85% when the petition clearly establishes specialty occupation. Denial risk increases when the job description includes duties that don't require a specific technical degree, or when the employer is classified as a staffing or consulting firm. Direct employer petitions with well-documented technical job duties perform significantly better.
What is the prevailing wage requirement for sponsored Information Security Manager jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.