Information Security Officer Jobs in USA with Visa Sponsorship
Information Security Officers are in high demand from employers willing to sponsor H-1B visa and O-1 visas. The role qualifies as a specialty occupation, and strong candidates with a computer science, cybersecurity, or information systems degree are well-positioned for sponsorship. For detailed occupation requirements, see the O*NET profile.
Find Information Security Officer JobsOverview
Showing 5 of 19,002+ Information Security Officer jobs
See all 19,002+ Information Security Officer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Officer roles.
Get Access To All JobsAbout TRS
Since 1917, the Teachers’ Retirement System of the City of New York (TRS) has been securing better futures for NYC educators. With a pension fund valued at approximately $123 billion, TRS serves over 274,000 members, providing them with retirement, disability, and death benefit services. At TRS, we seek dedicated professionals who are passionate about their work and committed to excellence. We pride ourselves on our member-centric culture, focused on delivering outstanding service and support to our members.
Position Summary
TRS is seeking a seasoned and strategic Chief Information Security Officer (CISO) to lead and elevate its Information Security and Business Continuity programs. This is a critical leadership role within a well-established discipline; continuity and forward-thinking guidance are essential to ensuring ongoing protection of TRS’ mission-critical functions. The ideal candidate is a versatile, decisive leader with deep expertise across all areas of information security, including policy development, risk assessments, regulatory audits, incident response, training, and third-party/vendor risk management. The CISO will collaborate closely with IT and business leaders and must be comfortable navigating both technical and strategic responsibilities. Reporting to the Chief Risk Officer, this position leads a small, high-performing team within the Risk Management Department and requires a hands-on leader who can make risk-informed decisions under pressure while continuously maturing the agency’s security posture.
Key Responsibilities
- Lead and continuously enhance the agency’s Information Security and Business Continuity programs, ensuring strategic alignment with IT architecture, security engineering, and operational frameworks in accordance with NIST, ISO, and applicable state regulatory standards.
- Serve as a technical and trusted advisor on Information Security and Business Continuity to IT, Legal, and business units, embedding security and resilience into systems, contracts, and daily operations.
- Participate in technical planning and understand impact to organization.
- Conduct and oversee cybersecurity risk assessments, vendor risk reviews, and responses to internal and external audits.
- Lead and coordinate the end-to-end lifecycle of security incidents, from initial detection and investigation to containment, forensics, and lessons-learned reporting. Serve as the technical escalation point for complex incidents.
- Maintain, test, improve, continuously improve business continuity and disaster recovery plans across critical operations, including data backup, replication strategies, and system failover procedures.
- Supervise and mentor a small, high impact team; ensuring coverage for both strategic planning and monitoring.
- Design and enforce technical policies, security configuration baselines, and automated compliance monitoring across hybrid infrastructure (on-premises and cloud environments).
- Design and lead a targeted security awareness program, promoting ownership and accountability across the organization.
- Monitor, track, and report on key risk indicators (KRIs), threat trends, control effectiveness, and program maturity metrics.
- Partner with auditors, regulators and external partners, to ensure compliance and manage remediation efforts.
- Engage with third-party vendors and service providers to assess security status and identify vulnerabilities.
- Stay current with emerging cybersecurity, privacy, and resilience trends, proactively integrating best practices and evolving threats into the agency’s strategic roadmap.
- Perform additional related duties as assigned by the Chief Risk Officer.
Minimum Qualifications
- A baccalaureate degree from an accredited college or university including or supplemented by 12 credits in mathematics, statistics, accounting, and/or actuarial science and four years of satisfactory full-time experience implementing the provisions of a retirement plan involving the use of mathematical, statistical, actuarial or accounting computations, 18 months of which must have been in an administrative, managerial or executive capacity or supervising professionals implementing the provisions of a retirement plan involving the use of mathematical, statistical, actuarial or accounting computations; or
- An associate degree or 60 credits from an accredited college or university, including or supplemented by 12 credits in mathematics, statistics, accounting and/or actuarial science and six years of satisfactory full-time experience as indicated in “1”; or
- Education and/or experience equivalent to “1” or “2” above. However, all candidates must have 60 credits from an accredited college or university, including or supplemented by 12 credits in mathematics, statistics, accounting and/or actuarial science and the 18 months of experience in a supervisory, administrative, managerial or executive capacity as described in “1” above.
Preferred Skills
- Minimum 6 years of relevant IT/InfoSec experience as above, including at least 18 months in a managerial role.
- Minimum 5 years of hands-on experience managing or supporting Information Security and/or Business Continuity programs.
- Proven ability to lead through complex security incidents, audits, and regulatory events.
- Experience in public sector environments preferred.
- Required certification: CISM or CISSP
- Preferred certifications: CRISC, CDPSE, CBCP, or equivalent industry-recognized credentials.
- Working knowledge of key security and compliance frameworks such as NIST, ISO 27001, and state/local regulatory standards.
- Demonstrated success managing multiple concurrent initiatives and working autonomously in high-responsibility roles.
- In-depth knowledge of Information Security, Cyber Risk Management, and Business Continuity planning.
- Strong interpersonal skills, with the ability to influence cross-functional stakeholders and drive consensus without direct authority. Exceptional communication skills, with the ability to effectively communicate technical and risk related concepts to executive leadership, non-technical stakeholders, and board-level audiences.
- Demonstrated experience in designing and implementing security awareness and training programs, incorporating principles of adult learning and behavior-change.
- Proficient in Microsoft Office (Word, Excel, PowerPoint) familiarity with GRC platforms and risk dashboards is a plus.
This position is also open to qualified persons with a disability who are eligible for the 55-a Program. Please indicate at the top of your resume and cover letter that you would like to be considered for the position through the 55-a Program.
Public Service Loan Forgiveness
As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/.
Residency Requirement
New York City residency is generally required within 90 days of appointment. However, City Employees in certain titles who have worked for the City for 2 continuous years may also be eligible to reside in Nassau, Suffolk, Putnam, Westchester, Rockland, or Orange County. To determine if the residency requirement applies to you, please discuss with the agency representative at the time of interview.
Additional Information
The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
Compensation
- Salary Range: $170,000.00 – $180,000.00
About TRS
Since 1917, the Teachers’ Retirement System of the City of New York (TRS) has been securing better futures for NYC educators. With a pension fund valued at approximately $123 billion, TRS serves over 274,000 members, providing them with retirement, disability, and death benefit services. At TRS, we seek dedicated professionals who are passionate about their work and committed to excellence. We pride ourselves on our member-centric culture, focused on delivering outstanding service and support to our members.
Position Summary
TRS is seeking a seasoned and strategic Chief Information Security Officer (CISO) to lead and elevate its Information Security and Business Continuity programs. This is a critical leadership role within a well-established discipline; continuity and forward-thinking guidance are essential to ensuring ongoing protection of TRS’ mission-critical functions. The ideal candidate is a versatile, decisive leader with deep expertise across all areas of information security, including policy development, risk assessments, regulatory audits, incident response, training, and third-party/vendor risk management. The CISO will collaborate closely with IT and business leaders and must be comfortable navigating both technical and strategic responsibilities. Reporting to the Chief Risk Officer, this position leads a small, high-performing team within the Risk Management Department and requires a hands-on leader who can make risk-informed decisions under pressure while continuously maturing the agency’s security posture.
Key Responsibilities
- Lead and continuously enhance the agency’s Information Security and Business Continuity programs, ensuring strategic alignment with IT architecture, security engineering, and operational frameworks in accordance with NIST, ISO, and applicable state regulatory standards.
- Serve as a technical and trusted advisor on Information Security and Business Continuity to IT, Legal, and business units, embedding security and resilience into systems, contracts, and daily operations.
- Participate in technical planning and understand impact to organization.
- Conduct and oversee cybersecurity risk assessments, vendor risk reviews, and responses to internal and external audits.
- Lead and coordinate the end-to-end lifecycle of security incidents, from initial detection and investigation to containment, forensics, and lessons-learned reporting. Serve as the technical escalation point for complex incidents.
- Maintain, test, improve, continuously improve business continuity and disaster recovery plans across critical operations, including data backup, replication strategies, and system failover procedures.
- Supervise and mentor a small, high impact team; ensuring coverage for both strategic planning and monitoring.
- Design and enforce technical policies, security configuration baselines, and automated compliance monitoring across hybrid infrastructure (on-premises and cloud environments).
- Design and lead a targeted security awareness program, promoting ownership and accountability across the organization.
- Monitor, track, and report on key risk indicators (KRIs), threat trends, control effectiveness, and program maturity metrics.
- Partner with auditors, regulators and external partners, to ensure compliance and manage remediation efforts.
- Engage with third-party vendors and service providers to assess security status and identify vulnerabilities.
- Stay current with emerging cybersecurity, privacy, and resilience trends, proactively integrating best practices and evolving threats into the agency’s strategic roadmap.
- Perform additional related duties as assigned by the Chief Risk Officer.
Minimum Qualifications
- A baccalaureate degree from an accredited college or university including or supplemented by 12 credits in mathematics, statistics, accounting, and/or actuarial science and four years of satisfactory full-time experience implementing the provisions of a retirement plan involving the use of mathematical, statistical, actuarial or accounting computations, 18 months of which must have been in an administrative, managerial or executive capacity or supervising professionals implementing the provisions of a retirement plan involving the use of mathematical, statistical, actuarial or accounting computations; or
- An associate degree or 60 credits from an accredited college or university, including or supplemented by 12 credits in mathematics, statistics, accounting and/or actuarial science and six years of satisfactory full-time experience as indicated in “1”; or
- Education and/or experience equivalent to “1” or “2” above. However, all candidates must have 60 credits from an accredited college or university, including or supplemented by 12 credits in mathematics, statistics, accounting and/or actuarial science and the 18 months of experience in a supervisory, administrative, managerial or executive capacity as described in “1” above.
Preferred Skills
- Minimum 6 years of relevant IT/InfoSec experience as above, including at least 18 months in a managerial role.
- Minimum 5 years of hands-on experience managing or supporting Information Security and/or Business Continuity programs.
- Proven ability to lead through complex security incidents, audits, and regulatory events.
- Experience in public sector environments preferred.
- Required certification: CISM or CISSP
- Preferred certifications: CRISC, CDPSE, CBCP, or equivalent industry-recognized credentials.
- Working knowledge of key security and compliance frameworks such as NIST, ISO 27001, and state/local regulatory standards.
- Demonstrated success managing multiple concurrent initiatives and working autonomously in high-responsibility roles.
- In-depth knowledge of Information Security, Cyber Risk Management, and Business Continuity planning.
- Strong interpersonal skills, with the ability to influence cross-functional stakeholders and drive consensus without direct authority. Exceptional communication skills, with the ability to effectively communicate technical and risk related concepts to executive leadership, non-technical stakeholders, and board-level audiences.
- Demonstrated experience in designing and implementing security awareness and training programs, incorporating principles of adult learning and behavior-change.
- Proficient in Microsoft Office (Word, Excel, PowerPoint) familiarity with GRC platforms and risk dashboards is a plus.
This position is also open to qualified persons with a disability who are eligible for the 55-a Program. Please indicate at the top of your resume and cover letter that you would like to be considered for the position through the 55-a Program.
Public Service Loan Forgiveness
As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/.
Residency Requirement
New York City residency is generally required within 90 days of appointment. However, City Employees in certain titles who have worked for the City for 2 continuous years may also be eligible to reside in Nassau, Suffolk, Putnam, Westchester, Rockland, or Orange County. To determine if the residency requirement applies to you, please discuss with the agency representative at the time of interview.
Additional Information
The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
Compensation
- Salary Range: $170,000.00 – $180,000.00
See all 19,002+ Information Security Officer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Officer roles.
Get Access To All JobsTips for Finding Information Security Officer Jobs
Emphasize your degree field clearly
Employers and USCIS both need to see that your degree directly relates to information security. A computer science, cybersecurity, or information systems degree is the strongest foundation. Unrelated degrees require careful framing and supporting documentation.
Target industries with dedicated security budgets
Financial services, healthcare, defense contractors, and large technology companies routinely sponsor Information Security Officers because regulatory compliance demands it. These employers have established immigration programs and are more likely to move quickly on sponsorship.
Highlight certifications alongside your degree
CISSP, CISM, and CISA certifications significantly strengthen your H-1B petition by demonstrating specialized knowledge. USCIS treats industry certifications as supporting evidence that the role requires a specific, specialized body of expertise.
Understand the specialty occupation argument
USCIS scrutinizes security roles where job postings say a degree is preferred rather than required. Confirm your employer's job description explicitly requires a bachelor's degree or higher in a specific technical field before the petition is filed.
Ask about cap-exempt employer options
Universities, nonprofit research institutions, and government-affiliated organizations are exempt from the H-1B lottery. Information Security Officers at these institutions can be sponsored year-round without waiting for the April registration window or risking lottery rejection.
Start the conversation early in the hiring process
H-1B petitions for October 1 start dates require registration in March. If you're interviewing in late spring or summer, ask whether the employer can support a cap-exempt filing or a change of status from a current valid visa category.
Frequently Asked Questions
Does the Information Security Officer role qualify as an H-1B specialty occupation?
Generally yes, but it depends on how the employer defines the role. USCIS requires the position to normally require a bachelor's degree or higher in a specific field such as computer science, cybersecurity, or information systems. Broadly defined security management roles that accept any degree can face RFEs. Job descriptions that specify a technical degree requirement are far easier to defend.
What degree do I need to get sponsored as an Information Security Officer?
A bachelor's degree in computer science, information security, cybersecurity, or information systems is the standard requirement. Some employers also accept electrical engineering or mathematics with relevant coursework. If your degree is in an unrelated field, you'll need to demonstrate equivalency through a combination of education and at least three years of specialized work experience for each missing year of qualifying study.
How competitive is H-1B sponsorship for cybersecurity and information security roles?
Information security is one of the more active fields for H-1B visa sponsorship. Financial institutions, healthcare systems, and technology companies file a significant volume of petitions for these roles each year, which reflects consistent employer demand. Because the overall H-1B lottery selects roughly 25% of registrations, having multiple employers willing to sponsor improves your odds. Migrate Mate lists employers actively sponsoring information security positions.
Can an Information Security Officer qualify for an O-1A visa instead of H-1B?
Yes, if you can document extraordinary ability in the field. Published research on security vulnerabilities, speaking at major cybersecurity conferences, significant contributions to widely adopted open-source security tools, or membership in panels that judge others' work all count as qualifying evidence. The O-1A has no lottery and no annual cap, making it a strong alternative for candidates who can meet the evidentiary standard.
Do clearance requirements affect visa sponsorship for Information Security Officer roles?
They can. Some Information Security Officer positions require a U.S. security clearance, which is generally not available to foreign nationals without permanent resident status. If a role requires a clearance, sponsorship is typically not possible. Focus your applications on roles that do not list clearance as a requirement, and confirm this directly with employers before investing time in the interview process.
What is the prevailing wage requirement for sponsored Information Security Officer jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.