Information Security Officer Jobs in USA with Visa Sponsorship
Information Security Officers are in high demand from employers willing to sponsor H-1B visa and O-1 visas. The role qualifies as a specialty occupation, and strong candidates with a computer science, cybersecurity, or information systems degree are well-positioned for sponsorship. For detailed occupation requirements, see the O*NET profile.
See All Information Security Officer JobsOverview
Showing 5 of 67+ Information Security Officer jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 67+ Information Security Officer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Officer roles.
Get Access To All JobsLocation: Hybrid- willing to consider locations where Cigna has an office presence.
Role Summary: The Vice President, Deputy Chief Information Security Officer (DCISO) – Evernorth is a senior cybersecurity leader within The Cigna Group’s Technology organization. This role is accountable for cybersecurity outcomes across the Evernorth business, including cyber risk management, security strategy execution, and security technology alignment. In this capacity, the leader serves as the CISO for Evernorth and has ownership of the Security Architecture & Engineering function as a shared enterprise service.
The role is responsible for ensuring cybersecurity capabilities are architected, engineered, and embedded into technology solutions in a manner that protects the confidentiality, integrity, and availability of information across a complex, highly regulated environment, while enabling business innovation and delivery at speed.
This is a highly visible role that partners closely with Evernorth and enterprise executives to advise on cyber risk, resilience, and security investment decisions, ensuring cybersecurity priorities for Evernorth are effectively addressed through enterprise-wide capabilities and standards.
The DCISO reports directly to the SVP, Global Chief Information Security Officer (GCISO), with a dotted-line relationship to CIO leadership. The role is an active member of the Enterprise CISO Council (ECC), contributing to enterprise-wide cybersecurity strategy, standards, and maturity.
Responsibilities:
Enterprise & Evernorth Cybersecurity Leadership
- Serve as the CISO for Evernorth, accountable for the overall cybersecurity posture and material cyber risk outcomes for the business.
- Act as a trusted advisor to Evernorth executive leadership on cybersecurity risk, resilience, and security investment priorities.
- Represent cybersecurity with Evernorth-specific Risk, Audit, and governance committees, and engage with Board-level forums as required.
- Provide executive leadership and oversight for how enterprise cybersecurity services are engaged and applied to address Evernorth-specific risks, regulatory obligations, and business priorities.
- Oversee cybersecurity risk related to mergers, acquisitions, and integrations, ensuring security considerations are incorporated into integration planning, risk forecasting, and remediation activities.
- Partner closely with enterprise cybersecurity operations, threat management, and assurance leaders to ensure clear accountability, effective engagement models, and timely escalation of Evernorth-related risks and issues.
- Serve as the primary Evernorth security leader, coordinating executive engagement and decision-making during significant cyber events impacting the business.
- Contribute to enterprise cybersecurity strategy, standards, and operating model decisions through active participation in the Enterprise CISO Council (ECC).
Security Architecture & Engineering
- Lead the Security Architecture & Engineering function, including strategy, operating model, talent, and enterprise delivery outcomes.
- Set enterprise-aligned direction for secure-by-design principles across applications, platforms, infrastructure, cloud, and emerging technologies.
- Establish and govern security architecture standards, reference architectures, design patterns, and guardrails aligned to enterprise frameworks and regulatory requirements.
- Ensure security architecture is embedded early in the technology delivery lifecycle, partnering with application, platform, and infrastructure leaders to proactively identify and mitigate risk.
- Drive security engineering outcomes, ensuring capabilities are scalable, resilient, automated where appropriate, and aligned to an evolving threat landscape.
- Guide adoption of modern engineering practices, including cloud-native patterns, API-first design, automation, and AI-enabled security capabilities.
Strategy, Transformation & Talent
- Drive continuous improvement of cybersecurity capabilities across Evernorth with a focus on simplification, automation, speed, and scalability.
- Lead strategic planning and investment prioritization in support of Evernorth cybersecurity priorities and enterprise standards.
- Serve as a senior people leader within the cybersecurity organization, fostering strong leadership, engagement, and performance across directly and indirectly aligned teams.
- Partner with Technology and Cybersecurity senior leaders to shape and support a globally integrated workforce strategy, expanding access to diverse talent sources while maintaining appropriate balance across regions and preserving critical capabilities and leadership continuity.
- Support the development, mentorship, and succession planning of cybersecurity leaders and critical roles aligned to Evernorth priorities.
- Promote a collaborative, inclusive, and execution-oriented culture that balances strong risk management with business enablement.
- Stay current on emerging threats, technologies, and operating models to continuously evolve organizational capability and effectiveness.
QUALIFICATIONS
- Bachelor’s degree required; Master’s degree or MBA preferred.
- 15+ years of progressive experience in cybersecurity, technology, or risk leadership roles, ideally within highly regulated environments.
- Demonstrated ability to lead at the enterprise level, influencing senior executives and driving alignment across complex, matrixed organizations.
- Proven experience in strategic and transformational leadership, with a track record of translating strategy into execution and measurable outcomes.
- Deep understanding of security and architecture frameworks and standards such as NIST, ISO, HITRUST, COBIT, ITIL, and FIPS.
- Strong knowledge of regulatory and compliance requirements, including HIPAA, PCI DSS, SOX, SOC, and data privacy.
- Broad technical depth across cloud, infrastructure, application security, identity, networking, and security engineering domains.
- Ability to clearly communicate complex technical concepts to non-technical and executive audiences, influencing decision-making and investment priorities.
- Experience working with and influencing globally distributed teams, vendors, and partners in a federated operating model.
- Strong relationship-building skills with technology, risk, and business leaders, enabling effective collaboration and outcomes.
- Demonstrated comfort operating in ambiguous, evolving environments, balancing risk management with business enablement.
- CISSP and/or other relevant security certifications strongly preferred.
If you will be working at home occasionally or permanently, the internet connection must be obtained through a cable broadband or fiber optic internet service provider with speeds of at least 10Mbps download/5Mbps upload.
About The Cigna Group
Doing something meaningful starts with a simple decision, a commitment to changing lives. At The Cigna Group, we’re dedicated to improving the health and vitality of those we serve. Through our divisions Cigna Healthcare and Evernorth Health Services, we are committed to enhancing the lives of our clients, customers and patients. Join us in driving growth and improving lives.
Qualified applicants will be considered without regard to race, color, age, disability, sex, childbirth (including pregnancy) or related medical conditions including but not limited to lactation, sexual orientation, gender identity or expression, veteran or military status, religion, national origin, ancestry, marital or familial status, genetic information, status with regard to public assistance, citizenship status or any other characteristic protected by applicable equal employment opportunity laws.
If you need a reasonable accommodation to complete the online application process, please email seeyourself@thecignagroup.com for assistance. Please note that this email inbox is dedicated to accommodation requests only and cannot provide application updates or accept resumes.
The Cigna Group has a tobacco-free policy and reserves the right not to hire tobacco/nicotine users in states where that is legally permissible. Candidates in such states who use tobacco/nicotine will not be considered for employment unless they enter a qualifying smoking cessation program prior to the start of their employment. These states include: Alabama, Alaska, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Iowa, Kansas, Maryland, Massachusetts, Michigan, Nebraska, Ohio, Pennsylvania, Texas, Utah, Vermont, and Washington State.
Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.
Location: Hybrid- willing to consider locations where Cigna has an office presence.
Role Summary: The Vice President, Deputy Chief Information Security Officer (DCISO) – Evernorth is a senior cybersecurity leader within The Cigna Group’s Technology organization. This role is accountable for cybersecurity outcomes across the Evernorth business, including cyber risk management, security strategy execution, and security technology alignment. In this capacity, the leader serves as the CISO for Evernorth and has ownership of the Security Architecture & Engineering function as a shared enterprise service.
The role is responsible for ensuring cybersecurity capabilities are architected, engineered, and embedded into technology solutions in a manner that protects the confidentiality, integrity, and availability of information across a complex, highly regulated environment, while enabling business innovation and delivery at speed.
This is a highly visible role that partners closely with Evernorth and enterprise executives to advise on cyber risk, resilience, and security investment decisions, ensuring cybersecurity priorities for Evernorth are effectively addressed through enterprise-wide capabilities and standards.
The DCISO reports directly to the SVP, Global Chief Information Security Officer (GCISO), with a dotted-line relationship to CIO leadership. The role is an active member of the Enterprise CISO Council (ECC), contributing to enterprise-wide cybersecurity strategy, standards, and maturity.
Responsibilities:
Enterprise & Evernorth Cybersecurity Leadership
- Serve as the CISO for Evernorth, accountable for the overall cybersecurity posture and material cyber risk outcomes for the business.
- Act as a trusted advisor to Evernorth executive leadership on cybersecurity risk, resilience, and security investment priorities.
- Represent cybersecurity with Evernorth-specific Risk, Audit, and governance committees, and engage with Board-level forums as required.
- Provide executive leadership and oversight for how enterprise cybersecurity services are engaged and applied to address Evernorth-specific risks, regulatory obligations, and business priorities.
- Oversee cybersecurity risk related to mergers, acquisitions, and integrations, ensuring security considerations are incorporated into integration planning, risk forecasting, and remediation activities.
- Partner closely with enterprise cybersecurity operations, threat management, and assurance leaders to ensure clear accountability, effective engagement models, and timely escalation of Evernorth-related risks and issues.
- Serve as the primary Evernorth security leader, coordinating executive engagement and decision-making during significant cyber events impacting the business.
- Contribute to enterprise cybersecurity strategy, standards, and operating model decisions through active participation in the Enterprise CISO Council (ECC).
Security Architecture & Engineering
- Lead the Security Architecture & Engineering function, including strategy, operating model, talent, and enterprise delivery outcomes.
- Set enterprise-aligned direction for secure-by-design principles across applications, platforms, infrastructure, cloud, and emerging technologies.
- Establish and govern security architecture standards, reference architectures, design patterns, and guardrails aligned to enterprise frameworks and regulatory requirements.
- Ensure security architecture is embedded early in the technology delivery lifecycle, partnering with application, platform, and infrastructure leaders to proactively identify and mitigate risk.
- Drive security engineering outcomes, ensuring capabilities are scalable, resilient, automated where appropriate, and aligned to an evolving threat landscape.
- Guide adoption of modern engineering practices, including cloud-native patterns, API-first design, automation, and AI-enabled security capabilities.
Strategy, Transformation & Talent
- Drive continuous improvement of cybersecurity capabilities across Evernorth with a focus on simplification, automation, speed, and scalability.
- Lead strategic planning and investment prioritization in support of Evernorth cybersecurity priorities and enterprise standards.
- Serve as a senior people leader within the cybersecurity organization, fostering strong leadership, engagement, and performance across directly and indirectly aligned teams.
- Partner with Technology and Cybersecurity senior leaders to shape and support a globally integrated workforce strategy, expanding access to diverse talent sources while maintaining appropriate balance across regions and preserving critical capabilities and leadership continuity.
- Support the development, mentorship, and succession planning of cybersecurity leaders and critical roles aligned to Evernorth priorities.
- Promote a collaborative, inclusive, and execution-oriented culture that balances strong risk management with business enablement.
- Stay current on emerging threats, technologies, and operating models to continuously evolve organizational capability and effectiveness.
QUALIFICATIONS
- Bachelor’s degree required; Master’s degree or MBA preferred.
- 15+ years of progressive experience in cybersecurity, technology, or risk leadership roles, ideally within highly regulated environments.
- Demonstrated ability to lead at the enterprise level, influencing senior executives and driving alignment across complex, matrixed organizations.
- Proven experience in strategic and transformational leadership, with a track record of translating strategy into execution and measurable outcomes.
- Deep understanding of security and architecture frameworks and standards such as NIST, ISO, HITRUST, COBIT, ITIL, and FIPS.
- Strong knowledge of regulatory and compliance requirements, including HIPAA, PCI DSS, SOX, SOC, and data privacy.
- Broad technical depth across cloud, infrastructure, application security, identity, networking, and security engineering domains.
- Ability to clearly communicate complex technical concepts to non-technical and executive audiences, influencing decision-making and investment priorities.
- Experience working with and influencing globally distributed teams, vendors, and partners in a federated operating model.
- Strong relationship-building skills with technology, risk, and business leaders, enabling effective collaboration and outcomes.
- Demonstrated comfort operating in ambiguous, evolving environments, balancing risk management with business enablement.
- CISSP and/or other relevant security certifications strongly preferred.
If you will be working at home occasionally or permanently, the internet connection must be obtained through a cable broadband or fiber optic internet service provider with speeds of at least 10Mbps download/5Mbps upload.
About The Cigna Group
Doing something meaningful starts with a simple decision, a commitment to changing lives. At The Cigna Group, we’re dedicated to improving the health and vitality of those we serve. Through our divisions Cigna Healthcare and Evernorth Health Services, we are committed to enhancing the lives of our clients, customers and patients. Join us in driving growth and improving lives.
Qualified applicants will be considered without regard to race, color, age, disability, sex, childbirth (including pregnancy) or related medical conditions including but not limited to lactation, sexual orientation, gender identity or expression, veteran or military status, religion, national origin, ancestry, marital or familial status, genetic information, status with regard to public assistance, citizenship status or any other characteristic protected by applicable equal employment opportunity laws.
If you need a reasonable accommodation to complete the online application process, please email seeyourself@thecignagroup.com for assistance. Please note that this email inbox is dedicated to accommodation requests only and cannot provide application updates or accept resumes.
The Cigna Group has a tobacco-free policy and reserves the right not to hire tobacco/nicotine users in states where that is legally permissible. Candidates in such states who use tobacco/nicotine will not be considered for employment unless they enter a qualifying smoking cessation program prior to the start of their employment. These states include: Alabama, Alaska, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Iowa, Kansas, Maryland, Massachusetts, Michigan, Nebraska, Ohio, Pennsylvania, Texas, Utah, Vermont, and Washington State.
Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.
See all 67+ Information Security Officer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Officer roles.
Get Access To All JobsTips for Finding Information Security Officer Jobs
Emphasize your degree field clearly
Employers and USCIS both need to see that your degree directly relates to information security. A computer science, cybersecurity, or information systems degree is the strongest foundation. Unrelated degrees require careful framing and supporting documentation.
Target industries with dedicated security budgets
Financial services, healthcare, defense contractors, and large technology companies routinely sponsor Information Security Officers because regulatory compliance demands it. These employers have established immigration programs and are more likely to move quickly on sponsorship.
Highlight certifications alongside your degree
CISSP, CISM, and CISA certifications significantly strengthen your H-1B petition by demonstrating specialized knowledge. USCIS treats industry certifications as supporting evidence that the role requires a specific, specialized body of expertise.
Understand the specialty occupation argument
USCIS scrutinizes security roles where job postings say a degree is preferred rather than required. Confirm your employer's job description explicitly requires a bachelor's degree or higher in a specific technical field before the petition is filed.
Ask about cap-exempt employer options
Universities, nonprofit research institutions, and government-affiliated organizations are exempt from the H-1B lottery. Information Security Officers at these institutions can be sponsored year-round without waiting for the April registration window or risking lottery rejection.
Start the conversation early in the hiring process
H-1B petitions for October 1 start dates require registration in March. If you're interviewing in late spring or summer, ask whether the employer can support a cap-exempt filing or a change of status from a current valid visa category.
Information Security Officer jobs are hiring across the US. Find yours.
Find Information Security Officer JobsFrequently Asked Questions
Does the Information Security Officer role qualify as an H-1B specialty occupation?
Generally yes, but it depends on how the employer defines the role. USCIS requires the position to normally require a bachelor's degree or higher in a specific field such as computer science, cybersecurity, or information systems. Broadly defined security management roles that accept any degree can face RFEs. Job descriptions that specify a technical degree requirement are far easier to defend.
What degree do I need to get sponsored as an Information Security Officer?
A bachelor's degree in computer science, information security, cybersecurity, or information systems is the standard requirement. Some employers also accept electrical engineering or mathematics with relevant coursework. If your degree is in an unrelated field, you'll need to demonstrate equivalency through a combination of education and at least three years of specialized work experience for each missing year of qualifying study.
How competitive is H-1B sponsorship for cybersecurity and information security roles?
Information security is one of the more active fields for H-1B sponsorship. Financial institutions, healthcare systems, and technology companies file a significant volume of petitions for these roles each year, which reflects consistent employer demand. Because the overall H-1B lottery selects roughly 25% of registrations, having multiple employers willing to sponsor improves your odds. Migrate Mate lists employers actively sponsoring information security positions.
Can an Information Security Officer qualify for an O-1A visa instead of H-1B?
Yes, if you can document extraordinary ability in the field. Published research on security vulnerabilities, speaking at major cybersecurity conferences, significant contributions to widely adopted open-source security tools, or membership in panels that judge others' work all count as qualifying evidence. The O-1A has no lottery and no annual cap, making it a strong alternative for candidates who can meet the evidentiary standard.
Do clearance requirements affect visa sponsorship for Information Security Officer roles?
They can. Some Information Security Officer positions require a U.S. security clearance, which is generally not available to foreign nationals without permanent resident status. If a role requires a clearance, sponsorship is typically not possible. Focus your applications on roles that do not list clearance as a requirement, and confirm this directly with employers before investing time in the interview process.
What is the prevailing wage requirement for sponsored Information Security Officer jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.
See which Information Security Officer employers are hiring and sponsoring visas right now.
Search Information Security Officer Jobs