IT Security Analyst Jobs in USA with Visa Sponsorship
IT Security Analyst roles rank among the most consistently sponsored positions in the U.S., with H-1B visa approvals running well above average for the occupation. Employers across finance, healthcare, and tech regularly file LCAs for this title, making it one of the stronger bets for visa-dependent candidates. For detailed occupation requirements, see the O*NET profile.
Find IT Security Analyst JobsOverview
Showing 5 of 204+ IT Security Analyst jobs
See all 204+ IT Security Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new IT Security Analyst roles.
Get Access To All JobsINTRODUCTION
Interviews are anticipated to be conducted within two weeks of closing date.
This posting may be used to fill multiple vacancies.
The Health Care Authority (HCA) participates in E-Verify and will verify employment eligibility upon hire.
Our Vision
Every New Mexican has access to affordable health care coverage through a coordinated and seamless health care system.
Our Mission
We ensure that New Mexicans attain their highest level of health by providing whole-person, cost-effective, accessible, and high-quality health care and safety-net services.
Our Goals
- Leverage purchasing power and partnerships to create innovative policies and models of comprehensive health care coverage that improve the health and well-being of New Mexicans and the workforce.
- Achieve health equity by addressing poverty, discrimination, and lack of resources, building a New Mexico where everyone thrives.
- Implement innovative technology and data-driven decision-making to provide unparalleled, convenient access to services and information.
- Build the best team in state government by supporting employees' continuous growth and wellness.
Why does the job exist?
The Senior IT Security Analyst will:
- Serve as the Governance and Compliance Analyst for the New Mexico Health Care Authority (HCA);
- Work with staff, technical teams, and vendors to ensure HCA complies with federal and state IT security laws, regulations, policies, and procedures;
- Lead all IT related audits, including drafting, reviewing, and submitting audit correspondence, plans, and required documentation;
- Develop security and compliance policies and procedures for review by the Chief Information Security Officer (CISO) and Chief Information Officer (CIO);
- Coordinate and manage workflow tasks associated with cybersecurity compliance and training initiatives, including:
- Coordinating tasks for ongoing audits;
- Cybersecurity policy development and lifecycle management;
- Co-administering the Governance, Risk and Compliance (GRC) program.
How does it get done?
The Senior IT Security Analyst is responsible for:
- Developing cybersecurity governance policies, procedures, standards, and guidelines;
- Performing audits and monitoring compliance with security policies, standards, and procedures;
- Coordinating and collaborating with internal teams, regulatory auditors, and third-party security assessors;
- Providing input into developing, reviewing, and implementing enterprise wide security policies and standards;
- Participating in defining project requirements and designing secure infrastructure solutions;
- Supporting risk analysis, risk management processes, and identifying acceptable residual risk;
- Conducting impact analysis and analyzing security reports to recommend mitigation strategies;
- Creating, updating, and maintaining documentation for security risks, controls, and remediation activities;
- Checking user accounts and access requests against authorized permissions;
- Assisting with data classification, disaster recovery planning, and forensic investigations;
- Reviewing and reporting security procedure violations and monitoring emerging security threats;
- Assisting in developing safeguards to protect system configurations and prevent unauthorized changes;
- Providing expertise for security awareness training to ensure continued compliance;
- Developing and reporting on Corrective Action Plans (CAP) and maintaining Plans of Actions and Milestones (POAM).
Who are the customers?
- Health Care Authority (HCA);
- Other State Agencies.
MINIMUM QUALIFICATION
Bachelor's degree in Computer Science, Management Information Systems (MIS), Information Technology, Engineering, or similar technical degree and three (3) years of experience in IT security or compliance validation (e.g., HIPAA, PCI). Any combination of education from an accredited college or university in a related field and/or direct experience in this occupation totaling seven (7) years may substitute for the required education and experience. A certificate in IT security/forensics (e.g., CISSP, CEH, CCFP, CCSP, HCISPP, SSCP) or regulated compliance (e.g., PCIP, ASV, ISA, QSA) can be used to substitute one (1) year of experience.
EMPLOYMENT REQUIREMENTS
- Must possess and maintain a valid Driver's License.
- Must obtain a Defensive Driving Certificate.
- Employment is subject to a pre-employment criminal background investigation and is conditional pending results.
WORKING CONDITIONS
Work will be performed in an office environment. Many requests will arrive by phone or in-person and the person must be able to speak and respond to the requester clearly. The person will work extended periods seated in front of a computer. The person must be able to operate a computer, keyboard, and mouse. Position requires occasional 1) travel, 2) night/weekend/holiday work, and 3) call-back work.
SUPPLEMENTAL INFORMATION
Do you know what Total Compensation is? Click here
Agency Contact Information: Theresa Romero, (505) 394-2977. Email
For information on Statutory Requirements for this position, click the Classification Description link on the job advertisement.
BARGAINING UNIT POSITION
This position is not covered by a collective bargaining agreement.
INTRODUCTION
Interviews are anticipated to be conducted within two weeks of closing date.
This posting may be used to fill multiple vacancies.
The Health Care Authority (HCA) participates in E-Verify and will verify employment eligibility upon hire.
Our Vision
Every New Mexican has access to affordable health care coverage through a coordinated and seamless health care system.
Our Mission
We ensure that New Mexicans attain their highest level of health by providing whole-person, cost-effective, accessible, and high-quality health care and safety-net services.
Our Goals
- Leverage purchasing power and partnerships to create innovative policies and models of comprehensive health care coverage that improve the health and well-being of New Mexicans and the workforce.
- Achieve health equity by addressing poverty, discrimination, and lack of resources, building a New Mexico where everyone thrives.
- Implement innovative technology and data-driven decision-making to provide unparalleled, convenient access to services and information.
- Build the best team in state government by supporting employees' continuous growth and wellness.
Why does the job exist?
The Senior IT Security Analyst will:
- Serve as the Governance and Compliance Analyst for the New Mexico Health Care Authority (HCA);
- Work with staff, technical teams, and vendors to ensure HCA complies with federal and state IT security laws, regulations, policies, and procedures;
- Lead all IT related audits, including drafting, reviewing, and submitting audit correspondence, plans, and required documentation;
- Develop security and compliance policies and procedures for review by the Chief Information Security Officer (CISO) and Chief Information Officer (CIO);
- Coordinate and manage workflow tasks associated with cybersecurity compliance and training initiatives, including:
- Coordinating tasks for ongoing audits;
- Cybersecurity policy development and lifecycle management;
- Co-administering the Governance, Risk and Compliance (GRC) program.
How does it get done?
The Senior IT Security Analyst is responsible for:
- Developing cybersecurity governance policies, procedures, standards, and guidelines;
- Performing audits and monitoring compliance with security policies, standards, and procedures;
- Coordinating and collaborating with internal teams, regulatory auditors, and third-party security assessors;
- Providing input into developing, reviewing, and implementing enterprise wide security policies and standards;
- Participating in defining project requirements and designing secure infrastructure solutions;
- Supporting risk analysis, risk management processes, and identifying acceptable residual risk;
- Conducting impact analysis and analyzing security reports to recommend mitigation strategies;
- Creating, updating, and maintaining documentation for security risks, controls, and remediation activities;
- Checking user accounts and access requests against authorized permissions;
- Assisting with data classification, disaster recovery planning, and forensic investigations;
- Reviewing and reporting security procedure violations and monitoring emerging security threats;
- Assisting in developing safeguards to protect system configurations and prevent unauthorized changes;
- Providing expertise for security awareness training to ensure continued compliance;
- Developing and reporting on Corrective Action Plans (CAP) and maintaining Plans of Actions and Milestones (POAM).
Who are the customers?
- Health Care Authority (HCA);
- Other State Agencies.
MINIMUM QUALIFICATION
Bachelor's degree in Computer Science, Management Information Systems (MIS), Information Technology, Engineering, or similar technical degree and three (3) years of experience in IT security or compliance validation (e.g., HIPAA, PCI). Any combination of education from an accredited college or university in a related field and/or direct experience in this occupation totaling seven (7) years may substitute for the required education and experience. A certificate in IT security/forensics (e.g., CISSP, CEH, CCFP, CCSP, HCISPP, SSCP) or regulated compliance (e.g., PCIP, ASV, ISA, QSA) can be used to substitute one (1) year of experience.
EMPLOYMENT REQUIREMENTS
- Must possess and maintain a valid Driver's License.
- Must obtain a Defensive Driving Certificate.
- Employment is subject to a pre-employment criminal background investigation and is conditional pending results.
WORKING CONDITIONS
Work will be performed in an office environment. Many requests will arrive by phone or in-person and the person must be able to speak and respond to the requester clearly. The person will work extended periods seated in front of a computer. The person must be able to operate a computer, keyboard, and mouse. Position requires occasional 1) travel, 2) night/weekend/holiday work, and 3) call-back work.
SUPPLEMENTAL INFORMATION
Do you know what Total Compensation is? Click here
Agency Contact Information: Theresa Romero, (505) 394-2977. Email
For information on Statutory Requirements for this position, click the Classification Description link on the job advertisement.
BARGAINING UNIT POSITION
This position is not covered by a collective bargaining agreement.
See all 204+ IT Security Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new IT Security Analyst roles.
Get Access To All JobsTips for Finding Visa Sponsorship as an IT Security Analyst
Target industries with the highest LCA filing volume
Finance, healthcare, defense contracting, and enterprise tech file the most LCAs for IT Security Analysts. Focusing your search on these sectors significantly increases your odds of finding an employer already comfortable with the sponsorship process.
Lead with certifications before your visa situation
Certifications like CISSP, CEH, CompTIA Security+, or CISM signal immediate value to hiring managers. Employers who are on the fence about sponsorship are more likely to proceed when your credentials reduce their perceived hiring risk.
Understand the specialty occupation standard for this role
USCIS requires that a bachelor's degree in a specific technical field, computer science, information security, or a closely related discipline, is the minimum entry requirement for the role, not just a preference listed on the job description.
Watch for security clearance requirements early
Some IT Security Analyst roles require U.S. security clearances, which visa holders cannot obtain. Filter these out early in your search to avoid investing time in applications that will stall once your work authorization status becomes apparent.
Target mid-size companies alongside large enterprises
Large tech firms get the most attention, but mid-size financial services firms and managed security service providers sponsor consistently and often face less internal friction around visa sponsorship decisions than heavily bureaucratic enterprise employers.
Use Migrate Mate to find roles with verified sponsorship history
Migrate Mate filters IT Security Analyst jobs by employers with active LCA filings, so you spend time on applications where sponsorship is already confirmed rather than guessing based on a checkbox buried in the job description.
Frequently Asked Questions
Does the IT Security Analyst role qualify as a specialty occupation for H-1B purposes?
Yes, IT Security Analyst consistently qualifies as a specialty occupation. USCIS expects applicants to hold at least a bachelor's degree in computer science, information systems, cybersecurity, or a closely related field. Generalist degrees in business or unrelated disciplines are unlikely to satisfy the requirement unless paired with highly specific coursework or substantial relevant experience.
How competitive is H-1B sponsorship for IT Security Analysts compared to other tech roles?
IT Security Analyst is one of the more sponsorship-friendly titles in tech. The cybersecurity talent shortage means employers are actively recruiting internationally, and USCIS H-1B visa approval rates for information security occupations have historically been strong. The challenge is the lottery, not employer reluctance, demand for skilled candidates usually outpaces supply at most mid-to-large employers.
Can I get sponsored as an IT Security Analyst without a computer science degree?
It's possible but harder. USCIS looks for a direct relationship between your degree field and the role. A degree in information technology, electrical engineering, or mathematics with a security concentration may satisfy the requirement. Without a qualifying degree, employers can sometimes argue equivalent experience using the three-years-of-experience-per-year-of-education rule, but this approach draws more scrutiny and requires careful documentation.
Do security clearance requirements affect visa sponsorship eligibility for this role?
Yes, and this is a critical filter to apply early. Many IT Security Analyst roles, particularly in defense, government contracting, and federal agency work, require active U.S. security clearances. Visa holders on H-1B or other nonimmigrant statuses are ineligible for clearances. Roles with clearance requirements effectively close off sponsorship for international candidates, so identifying this before applying saves significant time.
Where can I find IT Security Analyst jobs that actually sponsor visas?
Migrate Mate is the most reliable starting point. It surfaces IT Security Analyst roles specifically from employers with verified LCA filings, which means the sponsorship history is confirmed rather than assumed. This matters because many job postings indicate sponsorship availability without the employer having any recent track record of actually filing, Migrate Mate cuts through that ambiguity.
What is the prevailing wage requirement for sponsored IT Security Analyst jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.