Information Security Specialist Jobs in USA with Visa Sponsorship
Information Security Specialists are in high demand from U.S. employers willing to sponsor H-1B visa and E-3 visas. The role qualifies as a specialty occupation, and USCIS has a strong track record of approving petitions for cybersecurity positions requiring a bachelor's degree in computer science, information systems, or a related field. For detailed occupation requirements, see the O*NET profile.
Find Information Security Specialist JobsOverview
Showing 5 of 14,525+ Information Security Specialist jobs
See all 14,525+ Information Security Specialist Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Specialist roles.
Get Access To All JobsJob Description Summary
The Information Security Specialist - Analyst II applies established methods to moderately complex governance, risk management, compliance, and operational issues. Working with indirect supervision, the position coordinates with technical and business stakeholders and owns recurring deliverables, reporting, and follow-up activities. The role improves the accuracy, timeliness, and completeness of GRC and field operations outputs, translates control requirements into actionable guidance, supports remediation tracking, and helps protect the confidentiality, integrity, and availability of organizational information assets in support of MUSC’s academic, research, and healthcare missions.
Entity
MUSC Community Physicians (MCP)
Worker Type
Employee
Worker Sub-Type
Regular
Cost Center
CC006134 MCP - Information Solutions
Pay Rate Type
Salary
Pay Grade
Health-28
Scheduled Weekly Hours
40
Work Shift
Job Description
The Information Security Specialist - Analyst II applies established methods to moderately complex governance, risk management, compliance, and operational issues. Working with indirect supervision, the position coordinates with technical and business stakeholders and owns recurring deliverables, reporting, and follow-up activities. The role improves the accuracy, timeliness, and completeness of GRC and field operations outputs, translates control requirements into actionable guidance, supports remediation tracking, and helps protect the confidentiality, integrity, and availability of organizational information assets in support of MUSC’s academic, research, and healthcare missions.
Skills:
- Hands-on experience collecting and reviewing control evidence, maintaining risk and compliance records, and supporting audits or assessments.
- Ability to apply established methods to moderately complex control, compliance, risk, and operational issues with limited direction.
- Strong analytical and problem-solving skills, including risk assessment, gap analysis, exception documentation, and remediation tracking.
- Working knowledge of applicable frameworks and requirements, such as ISO 27000, HIPAA/HITECH, FERPA, PCI DSS, NIST Cybersecurity Framework, and NIST SP 800-53.
- Ability to coordinate field operations requests, recurring deliverables, reporting, and follow-up activities across technical and business stakeholders.
- Strong written and verbal communication skills, including translating control requirements and technical findings into actionable stakeholder guidance.
- Experience with GRC tools, documentation and ticketing workflows, compliance tracking systems, and stakeholder reporting.
Ability to work independently, manage competing priorities, and improve the accuracy, timeliness, and completeness of assigned outputs.
Requirements (Education, Experience, Licensure, Registry, Certification):
Education: Bachelor’s degree, or equivalent work experience, required.
Experience: At least three (3) years of experience in cybersecurity, compliance or audit, technology operations, or related business functions. Hands-on experience should include collecting and reviewing control evidence, maintaining risk or compliance records, supporting audits or assessments, coordinating field operations requests, documenting exceptions, and tracking remediation actions.
Certification: Role-relevant certification required, such as Security+, CySA+, SSCP, CRISC Associate, CISA Associate, Microsoft SC-900, or an equivalent cybersecurity certification.
Preferred qualifications: Strong familiarity with compliance requirements affecting academic medical centers; knowledge of NIST Cybersecurity Framework and NIST SP 800-53; experience conducting risk assessments in healthcare or higher education; proficiency with GRC platforms and compliance tracking systems; or additional advanced role-relevant certification.
If you like working with energetic enthusiastic individuals, you will enjoy your career with us!
The Medical University of South Carolina is an Equal Opportunity Employer. MUSC does not discriminate on the basis of race, color, religion or belief, age, sex, national origin, gender identity, sexual orientation, disability, protected veteran status, family or parental status, or any other status protected by state laws and/or federal regulations. All qualified applicants are encouraged to apply and will receive consideration for employment based upon applicable qualifications, merit and business need.
Medical University of South Carolina participates in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees. For further information about the E-Verify program, please click here: http://www.uscis.gov/e-verify/employees
Job Description Summary
The Information Security Specialist - Analyst II applies established methods to moderately complex governance, risk management, compliance, and operational issues. Working with indirect supervision, the position coordinates with technical and business stakeholders and owns recurring deliverables, reporting, and follow-up activities. The role improves the accuracy, timeliness, and completeness of GRC and field operations outputs, translates control requirements into actionable guidance, supports remediation tracking, and helps protect the confidentiality, integrity, and availability of organizational information assets in support of MUSC’s academic, research, and healthcare missions.
Entity
MUSC Community Physicians (MCP)
Worker Type
Employee
Worker Sub-Type
Regular
Cost Center
CC006134 MCP - Information Solutions
Pay Rate Type
Salary
Pay Grade
Health-28
Scheduled Weekly Hours
40
Work Shift
Job Description
The Information Security Specialist - Analyst II applies established methods to moderately complex governance, risk management, compliance, and operational issues. Working with indirect supervision, the position coordinates with technical and business stakeholders and owns recurring deliverables, reporting, and follow-up activities. The role improves the accuracy, timeliness, and completeness of GRC and field operations outputs, translates control requirements into actionable guidance, supports remediation tracking, and helps protect the confidentiality, integrity, and availability of organizational information assets in support of MUSC’s academic, research, and healthcare missions.
Skills:
- Hands-on experience collecting and reviewing control evidence, maintaining risk and compliance records, and supporting audits or assessments.
- Ability to apply established methods to moderately complex control, compliance, risk, and operational issues with limited direction.
- Strong analytical and problem-solving skills, including risk assessment, gap analysis, exception documentation, and remediation tracking.
- Working knowledge of applicable frameworks and requirements, such as ISO 27000, HIPAA/HITECH, FERPA, PCI DSS, NIST Cybersecurity Framework, and NIST SP 800-53.
- Ability to coordinate field operations requests, recurring deliverables, reporting, and follow-up activities across technical and business stakeholders.
- Strong written and verbal communication skills, including translating control requirements and technical findings into actionable stakeholder guidance.
- Experience with GRC tools, documentation and ticketing workflows, compliance tracking systems, and stakeholder reporting.
Ability to work independently, manage competing priorities, and improve the accuracy, timeliness, and completeness of assigned outputs.
Requirements (Education, Experience, Licensure, Registry, Certification):
Education: Bachelor’s degree, or equivalent work experience, required.
Experience: At least three (3) years of experience in cybersecurity, compliance or audit, technology operations, or related business functions. Hands-on experience should include collecting and reviewing control evidence, maintaining risk or compliance records, supporting audits or assessments, coordinating field operations requests, documenting exceptions, and tracking remediation actions.
Certification: Role-relevant certification required, such as Security+, CySA+, SSCP, CRISC Associate, CISA Associate, Microsoft SC-900, or an equivalent cybersecurity certification.
Preferred qualifications: Strong familiarity with compliance requirements affecting academic medical centers; knowledge of NIST Cybersecurity Framework and NIST SP 800-53; experience conducting risk assessments in healthcare or higher education; proficiency with GRC platforms and compliance tracking systems; or additional advanced role-relevant certification.
If you like working with energetic enthusiastic individuals, you will enjoy your career with us!
The Medical University of South Carolina is an Equal Opportunity Employer. MUSC does not discriminate on the basis of race, color, religion or belief, age, sex, national origin, gender identity, sexual orientation, disability, protected veteran status, family or parental status, or any other status protected by state laws and/or federal regulations. All qualified applicants are encouraged to apply and will receive consideration for employment based upon applicable qualifications, merit and business need.
Medical University of South Carolina participates in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees. For further information about the E-Verify program, please click here: http://www.uscis.gov/e-verify/employees
See all 14,525+ Information Security Specialist Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Specialist roles.
Get Access To All JobsTips for Finding Visa Sponsorship as an Information Security Specialist
Target employers with active security clearance programs
Defense contractors, federal agencies, and financial institutions run large security teams and sponsor visas regularly. These employers have established immigration infrastructure, making the sponsorship process faster and less uncertain than with smaller companies.
Highlight certifications alongside your degree
CISSP, CISM, CompTIA Security+, and CEH credentials signal technical depth to employers and strengthen your H-1B petition. USCIS scrutinizes specialty occupation claims for security roles, and certifications help demonstrate the position requires specialized expertise.
Frame your role around a specific security domain
Generalist titles face more USCIS scrutiny than domain-specific ones. Positioning yourself as a penetration tester, SOC analyst, or cloud security engineer ties your degree directly to the role and makes the specialty occupation argument significantly cleaner.
Verify the employer has filed security-role LCAs before
Employers who have sponsored information security specialists previously understand the process and prevailing wage obligations. Prior LCA filings for your role type are a strong signal the company is prepared to move quickly and accurately.
Australians should prioritize the E-3 over H-1B lottery
The E-3 visa has no lottery, no annual cap pressure, and processes within weeks at Australian consulates. For Australian cybersecurity professionals, it's a faster and more predictable path than waiting on H-1B selection results in April.
Request a specialty occupation opinion letter if your degree is adjacent
If your degree is in mathematics, electrical engineering, or a non-CS field, an immigration attorney can draft a legal opinion connecting your background to the security role. This proactively addresses the most common RFE trigger for this occupation.
Frequently Asked Questions
Does Information Security Specialist qualify as a specialty occupation for H-1B purposes?
Yes, in the vast majority of cases. USCIS consistently recognizes information security roles as specialty occupations when the position requires a bachelor's degree or higher in computer science, information systems, cybersecurity, or a closely related field. Roles tied to a specific domain, such as threat analysis, incident response, or cloud security, have the strongest petitions. Generic titles with loosely defined duties face a higher risk of a Request for Evidence.
What degree do I need for an employer to sponsor my visa in this field?
Most employers require a bachelor's degree in computer science, information systems, cybersecurity, or a related STEM discipline. Some accept degrees in mathematics or electrical engineering when paired with relevant experience. Australian three-year bachelor's degrees are generally accepted as equivalent to U.S. four-year degrees for E-3 purposes. If your degree is in an adjacent field, three years of specialized security experience can substitute for one year of education in certain visa frameworks.
How do I find employers who actively sponsor visas for security roles?
Browse Migrate Mate to filter information security positions by visa sponsorship availability. Employers who list roles there have already indicated willingness to sponsor, which cuts out the guesswork of cold applications. Defense contractors, large financial institutions, and cloud infrastructure companies are the most active sponsors, but mid-sized managed security service providers also file LCAs for this role regularly.
Are H-1B approval rates high for information security roles?
Approval rates for well-documented security petitions are strong. The primary risk factor is specialty occupation challenges, which occur when a job description is vague or the employer fails to show the role requires a specific degree. Petitions that clearly tie the position to a technical security domain, include a detailed duties description, and show the degree requirement in the job posting consistently clear USCIS review without issue.
Can I change employers mid-visa if I find a better security role?
Yes. For H-1B visa holders, portability rules allow you to start working for a new employer as soon as they file a transfer petition, without waiting for approval, provided your original petition was approved and you've maintained valid status. For E-3 holders, the process restarts with the new employer filing a fresh LCA and you obtaining a new visa stamp, which typically takes a few weeks from an Australian consulate.
What is the prevailing wage requirement for sponsored Information Security Specialist jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.