Information Security Officer Jobs in USA with Visa Sponsorship
Information Security Officer roles qualify as H-1B visa specialty occupations, requiring a bachelor's degree in computer science, information systems, or a related field. Employers file a Labor Condition Application before sponsoring, and the annual cap and selection process apply. Active clearance pipelines and cybersecurity demand make this role a consistent sponsorship target. For detailed occupation requirements, see the O*NET profile.
Find Information Security Officer JobsOverview
Showing 5 of 14,502+ Information Security Officer jobs
See all 14,502+ Information Security Officer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Officer roles.
Get Access To All JobsJob Description:
DXC Technology is expanding its global cybersecurity program to further strengthen cyber governance, risk management, regulatory compliance, and operational resilience across its business operations. We are seeking an experienced Senior Manager – Business Information Security Officer (BISO) to support key business units and service lines.
Representing the Global Chief Information Security Officer (CISO), the BISO is responsible for embedding cybersecurity strategy, governance, and risk management practices into business unit operations, strategic initiatives, and service delivery.
As a trusted strategic advisor to business unit leadership, this role provides oversight and direction on the organization's security posture, risk exposure, control effectiveness, and cybersecurity priorities. The BISO partners closely with business and technology leaders to strengthen security maturity, support informed risk-based decision-making, and ensure that cybersecurity remains an integral part of business operations while protecting clients, data, services, and DXC's reputation.
Key Responsibilities
Strategic Cybersecurity Leadership & Governance
- Serve as a trusted cybersecurity advisor to business unit leadership, providing strategic guidance on emerging cyber threats, security posture, control effectiveness, and operational resilience.
- Partner with Global Cybersecurity leadership to ensure alignment with enterprise security strategies, policies, standards, and emerging threat intelligence.
- Establish and lead business unit cybersecurity governance, including security health reporting, risk reviews, and executive-level updates.
- Promote cybersecurity as a business enabler, supporting secure growth, innovation, operational resilience, and client trust.
Cyber Risk & Control Management
- Oversee the business unit cybersecurity risk register, ensuring that material risks, control gaps, vulnerabilities, and emerging threats are identified, assessed, prioritized, and effectively managed.
- Drive remediation of high-priority cybersecurity risks and control deficiencies in collaboration with technology, engineering, architecture, and operational stakeholders.
- Oversee the implementation and effectiveness of cybersecurity hygiene controls, ensuring alignment with enterprise requirements and business operations.
- Translate technical security findings, threat intelligence, and control weaknesses into clear business impacts, risk assessments, and actionable recommendations for leadership.
- Partner with security architecture and cyber engineering teams to embed baseline security controls into products, services, technology changes, and transformation initiatives.
- Engage early in business strategy, transformation, and delivery initiatives to proactively identify cybersecurity requirements and address potential risks.
Audit, Compliance & External Engagement
- Serve as the senior point of contact for cybersecurity-related audits, regulatory examinations, corporate security reviews, and control assessments.
- Ensure audit readiness through effective oversight of supporting evidence, management responses, and timely remediation of security findings.
- Monitor compliance with enterprise cybersecurity standards, regulatory requirements, and applicable control frameworks.
- Engage with clients and external stakeholders, as required, to communicate DXC's cybersecurity posture, control environment, resilience capabilities, and risk management practices.
Required Qualifications & Experience
Education & Professional Experience
- Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related discipline, or equivalent relevant professional experience. An advanced degree is preferred.
- Minimum of 12 years of experience in information security, cybersecurity, cyber risk management, or related technology disciplines.
- Significant experience in senior cybersecurity leadership and risk management roles within complex, global, and highly regulated environments.
Technical & Professional Expertise
- Deep knowledge of cybersecurity threats and security domains, including security controls, vulnerability management, identity and access management, incident response, security architecture, and operational resilience.
- Strong understanding of cybersecurity governance, enterprise risk management, regulatory requirements, audit processes, issue management, and Governance, Risk, and Compliance (GRC) platforms.
- Demonstrated experience with cybersecurity maturity models, risk management methodologies, and industry-recognized frameworks, including NIST, ISO 27001, and CIS Controls.
- Experience developing and managing metrics-driven cybersecurity programs, including security performance indicators, risk reporting, and control effectiveness assessments.
- Proven ability to influence and advise senior business stakeholders on complex cybersecurity and risk matters, translating technical issues into business impact and practical, risk-based recommendations.
- Excellent stakeholder management, communication, presentation, and executive reporting skills.
- Ability to operate effectively in fast-paced, complex, matrixed environments, collaborating across multiple business functions, technology teams, and geographies.
- Experience building, scaling, or maturing cybersecurity programs across multiple business units or global regions is highly desirable.
Compensation at DXC is influenced by an array of factors, including but not limited to the experience, job-related knowledge, skills, competencies, as well as contract-specific affordability and organizational requirements. A reasonable estimate of the current compensation range for this position is $165,500 - $307,300.
Full-time hires are eligible to participate in the DXC benefit program. DXC offers a comprehensive, flexible, and competitive benefits program which includes, but is not limited to, health, dental, and vision insurance coverage; employee wellness; life and disability insurance; a retirement savings plan, paid holidays, paid time off.
At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.
If you are an applicant from the United States, Guam, or Puerto Rico
DXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law. View postings below.
We participate in E-Verify. In addition to the posters already identified, DXC provides access to prospective employees for the Federal Minimum Wage Poster, Federal Polygraph Protection Act Poster as well as any state or locality specific applicant posters. To access the postings in the link below, select your state to view all applicable federal, state and locality postings. Postings are available in English, and in Spanish, where required. View postings below.
Disability Accommodations
If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us via email.
Please note: DXC will respond only to requests for accommodations due to a disability.
Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.
Job Description:
DXC Technology is expanding its global cybersecurity program to further strengthen cyber governance, risk management, regulatory compliance, and operational resilience across its business operations. We are seeking an experienced Senior Manager – Business Information Security Officer (BISO) to support key business units and service lines.
Representing the Global Chief Information Security Officer (CISO), the BISO is responsible for embedding cybersecurity strategy, governance, and risk management practices into business unit operations, strategic initiatives, and service delivery.
As a trusted strategic advisor to business unit leadership, this role provides oversight and direction on the organization's security posture, risk exposure, control effectiveness, and cybersecurity priorities. The BISO partners closely with business and technology leaders to strengthen security maturity, support informed risk-based decision-making, and ensure that cybersecurity remains an integral part of business operations while protecting clients, data, services, and DXC's reputation.
Key Responsibilities
Strategic Cybersecurity Leadership & Governance
- Serve as a trusted cybersecurity advisor to business unit leadership, providing strategic guidance on emerging cyber threats, security posture, control effectiveness, and operational resilience.
- Partner with Global Cybersecurity leadership to ensure alignment with enterprise security strategies, policies, standards, and emerging threat intelligence.
- Establish and lead business unit cybersecurity governance, including security health reporting, risk reviews, and executive-level updates.
- Promote cybersecurity as a business enabler, supporting secure growth, innovation, operational resilience, and client trust.
Cyber Risk & Control Management
- Oversee the business unit cybersecurity risk register, ensuring that material risks, control gaps, vulnerabilities, and emerging threats are identified, assessed, prioritized, and effectively managed.
- Drive remediation of high-priority cybersecurity risks and control deficiencies in collaboration with technology, engineering, architecture, and operational stakeholders.
- Oversee the implementation and effectiveness of cybersecurity hygiene controls, ensuring alignment with enterprise requirements and business operations.
- Translate technical security findings, threat intelligence, and control weaknesses into clear business impacts, risk assessments, and actionable recommendations for leadership.
- Partner with security architecture and cyber engineering teams to embed baseline security controls into products, services, technology changes, and transformation initiatives.
- Engage early in business strategy, transformation, and delivery initiatives to proactively identify cybersecurity requirements and address potential risks.
Audit, Compliance & External Engagement
- Serve as the senior point of contact for cybersecurity-related audits, regulatory examinations, corporate security reviews, and control assessments.
- Ensure audit readiness through effective oversight of supporting evidence, management responses, and timely remediation of security findings.
- Monitor compliance with enterprise cybersecurity standards, regulatory requirements, and applicable control frameworks.
- Engage with clients and external stakeholders, as required, to communicate DXC's cybersecurity posture, control environment, resilience capabilities, and risk management practices.
Required Qualifications & Experience
Education & Professional Experience
- Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related discipline, or equivalent relevant professional experience. An advanced degree is preferred.
- Minimum of 12 years of experience in information security, cybersecurity, cyber risk management, or related technology disciplines.
- Significant experience in senior cybersecurity leadership and risk management roles within complex, global, and highly regulated environments.
Technical & Professional Expertise
- Deep knowledge of cybersecurity threats and security domains, including security controls, vulnerability management, identity and access management, incident response, security architecture, and operational resilience.
- Strong understanding of cybersecurity governance, enterprise risk management, regulatory requirements, audit processes, issue management, and Governance, Risk, and Compliance (GRC) platforms.
- Demonstrated experience with cybersecurity maturity models, risk management methodologies, and industry-recognized frameworks, including NIST, ISO 27001, and CIS Controls.
- Experience developing and managing metrics-driven cybersecurity programs, including security performance indicators, risk reporting, and control effectiveness assessments.
- Proven ability to influence and advise senior business stakeholders on complex cybersecurity and risk matters, translating technical issues into business impact and practical, risk-based recommendations.
- Excellent stakeholder management, communication, presentation, and executive reporting skills.
- Ability to operate effectively in fast-paced, complex, matrixed environments, collaborating across multiple business functions, technology teams, and geographies.
- Experience building, scaling, or maturing cybersecurity programs across multiple business units or global regions is highly desirable.
Compensation at DXC is influenced by an array of factors, including but not limited to the experience, job-related knowledge, skills, competencies, as well as contract-specific affordability and organizational requirements. A reasonable estimate of the current compensation range for this position is $165,500 - $307,300.
Full-time hires are eligible to participate in the DXC benefit program. DXC offers a comprehensive, flexible, and competitive benefits program which includes, but is not limited to, health, dental, and vision insurance coverage; employee wellness; life and disability insurance; a retirement savings plan, paid holidays, paid time off.
At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.
If you are an applicant from the United States, Guam, or Puerto Rico
DXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law. View postings below.
We participate in E-Verify. In addition to the posters already identified, DXC provides access to prospective employees for the Federal Minimum Wage Poster, Federal Polygraph Protection Act Poster as well as any state or locality specific applicant posters. To access the postings in the link below, select your state to view all applicable federal, state and locality postings. Postings are available in English, and in Spanish, where required. View postings below.
Disability Accommodations
If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us via email.
Please note: DXC will respond only to requests for accommodations due to a disability.
Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.
See all 14,502+ Information Security Officer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Officer roles.
Get Access To All JobsTips for Finding Information Security Officer Jobs
Map your degree to the role
USCIS requires your degree to directly relate to information security work. A degree in computer science, cybersecurity, or information systems maps cleanly. MIS or electrical engineering degrees can qualify, but document the connection explicitly in your resume and cover materials.
Target employers with LCA filing history
Use Migrate Mate to find U.S. employers with verified LCA sponsorship history for information security roles. This filters out companies that say they sponsor but rarely follow through, saving weeks of back-and-forth during your job search.
Get security certifications before applying
CISSP, CISM, or CompTIA Security+ certifications strengthen your specialty occupation argument at the LCA and I-129 stage. Employers filing for Information Security Officers face more USCIS scrutiny on degree-role fit when the applicant lacks certifications alongside their degree.
Clarify clearance eligibility early in negotiations
Many Information Security Officer postings require or prefer a U.S. security clearance. Non-citizens on H-1B can hold some clearance levels, but sponsoring the investigation takes additional time. Ask the employer directly before the offer stage so clearance timelines don't stall your start date.
Verify prevailing wage before accepting an offer
Your employer must file an LCA certifying your salary meets the DOL prevailing wage for your location and role. Check the OFLC Wage Search using your job title and metropolitan area before you negotiate. Accepting below the wage floor can cause LCA denial and delay your start.
Prepare for PERM if targeting a green card path
Information security roles often support EB-2 or EB-3 green card petitions through PERM labor certification. Your employer must demonstrate no qualified U.S. workers are available. Documenting specialized skills in areas like threat intelligence or zero-trust architecture strengthens the PERM record from the outset.
Frequently Asked Questions
Does an Information Security Officer role qualify as an H-1B specialty occupation?
Yes. USCIS treats Information Security Officer as a specialty occupation because the role normally requires at least a bachelor's degree in a directly related field such as computer science, information systems, or cybersecurity. If your degree is in an adjacent discipline like electrical engineering or MIS, your employer should document the connection clearly in the H-1B petition to reduce the risk of a Request for Evidence.
Which visas can sponsor an Information Security Officer?
H-1B is the most common path, covering the standard specialty occupation requirements and annual cap. Australian nationals can use the E-3 visa under the same specialty occupation standard, with a separate cap that has never been exhausted. Chilean and Singaporean nationals may qualify under H-1B1 visa. TN visa is not an option because Information Security Officer does not appear on the USMCA profession list. For permanent residence, EB-2 or EB-3 through PERM are realistic routes once you're established with an employer.
How do I find employers who actively sponsor Information Security Officer roles?
Migrate Mate lists U.S. employers with verified LCA sponsorship history for information security positions, searchable by city and role type. This lets you focus your applications on companies that have already committed to the sponsorship process rather than those that only mention it in job postings.
Does a security clearance requirement affect my visa sponsorship options?
It can complicate the timeline. H-1B holders are not automatically barred from holding security clearances, but many clearances require U.S. citizenship and cannot be sponsored for non-citizens. Roles posting a clearance requirement often mean the employer expects the successful candidate to already hold one or will pursue it only after the hire. Confirm the clearance path explicitly before accepting any offer that lists it as a requirement.
What happens to my H-1B status if my employer is acquired or restructures?
If your employer undergoes a merger or acquisition, your H-1B status may transfer automatically if the new entity assumes the same role and employment terms, but the successor employer must review whether a new I-129 petition is needed. USCIS guidance on successor-in-interest applies in many cases. If the restructuring changes your job duties or location materially, an amended petition is required. Check the new entity's EIN and legal structure with your employer's immigration counsel promptly after any corporate change.
What is the prevailing wage requirement for sponsored Information Security Officer jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.