Risk Compliance Analyst Jobs in USA with Visa Sponsorship
Risk compliance analyst roles qualify for H-1B visa and E-3 visa sponsorship as specialty occupations requiring a bachelor's degree in finance, accounting, or a related field. Employers in banking, insurance, and fintech regularly sponsor candidates, and USCIS approves these petitions at a high rate. For detailed occupation requirements, see the O*NET profile.
Find Risk Compliance Analyst JobsOverview
Showing 5 of 1,163+ Risk Compliance Analyst jobs
See all 1,163+ Risk Compliance Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Risk Compliance Analyst roles.
Get Access To All JobsINTRODUCTION
The Director, Cybersecurity Governance, Risk and Compliance (GRC) is responsible for leading DIRECTV's enterprise cybersecurity governance, risk management, compliance, policy, and security assurance programs. This role provides strategic leadership and operational oversight across cybersecurity governance functions, ensuring cybersecurity risks are effectively managed, regulatory and contractual obligations are met, and cybersecurity initiatives align with business objectives. The Director serves as the primary leader for cybersecurity governance activities, executive cybersecurity reporting, risk management, compliance programs, security awareness initiatives, supplier security oversight, and security assurance testing programs. This position manages a team of cybersecurity professionals and contractors and serves as a key partner to technology, business, audit, legal, procurement, privacy, and executive leadership teams.
ROLE AND RESPONSIBILITIES
Here’s what you’ll do:
Cybersecurity Governance:
- Lead the enterprise Cybersecurity Governance Program.
- Develop and maintain cybersecurity KPIs, KRIs, scorecards, and executive reporting.
- Prepare and facilitate monthly Cybersecurity Governance Reviews and executive presentations.
- Track cybersecurity initiatives, remediation activities, and strategic priorities.
- Drive accountability for cybersecurity performance across the organization.
Cyber Risk Management:
- Lead enterprise cyber risk identification, assessment, reporting, and remediation programs.
- Maintain cybersecurity risk registers and risk treatment plans.
- Facilitate risk reviews with business and technology stakeholders.
- Present cybersecurity risk posture to senior leadership.
Policy, Standards and Governance:
- Own cybersecurity policies, standards, procedures, and governance frameworks.
- Ensure alignment with industry standards and regulatory requirements.
- Maintain governance processes supporting cybersecurity decision-making.
Compliance and Audit:
- Lead cybersecurity compliance activities supporting PCI DSS, SOX, regulatory, and contractual requirements.
- Coordinate internal and external audits.
- Manage remediation efforts resulting from audit findings and assessments.
- Maintain cybersecurity control documentation and evidence repositories.
Third-Party and Supplier Security:
- Lead Supplier Information Security Requirement (SISR) governance and oversight.
- Manage third-party cybersecurity risk assessments and monitoring.
- Partner with Procurement, Legal, and Vendor Management organizations to ensure supplier security compliance.
Security Awareness and Training:
- Lead enterprise cybersecurity awareness, training, and phishing simulation programs.
- Establish metrics to measure effectiveness and maturity.
- Drive continuous improvement of employee cybersecurity culture.
Security Assurance and Testing Programs:
- Provide governance oversight of:
- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Application Penetration Testing
- Infrastructure Penetration Testing
- Vulnerability Assessment Programs
- Ensure testing results are tracked, reported, and remediated appropriately.
Leadership and People Management:
- Lead and develop cybersecurity governance personnel and contractors.
- Manage vendor and consulting relationships supporting GRC activities.
- Establish goals, objectives, and performance measures for the organization.
- Build a scalable governance function supporting DIRECTV's cybersecurity strategy.
BASIC QUALIFICATIONS
What you’ll need to be successful:
Required:
- Bachelor's degree in Cybersecurity, Information Technology, Business, Engineering, or related field.
- 5 – 7 years required, 10+ years desired progressive cybersecurity experience.
- 5+ years of leadership experience managing cybersecurity programs and teams.
- Deep knowledge of cybersecurity governance, risk management, compliance, and security frameworks.
- Experience with PCI DSS, NIST Cybersecurity Framework, ISO 27001, CIS Controls, and risk management methodologies.
- Experience presenting cybersecurity metrics and risk information to executive leadership.
- Strong written and verbal communication skills.
PREFERRED QUALIFICATIONS
- CISSP, CISM, CRISC, CGEIT, PCI ISA, or equivalent certifications.
- Experience leading enterprise cybersecurity governance programs.
- Experience in telecommunications, media, technology, or highly regulated industries.
- Experience building cybersecurity governance organizations during periods of transformation or separation activities.
REPORTING RELATIONSHIP
Reports to: Senior Director, IT & Corporate Cybersecurity
ORGANIZATION SCOPE
- Direct leadership responsibility for Cybersecurity Governance, Risk and Compliance functions.
- Oversight of approximately six contractor resources and future employee growth within the GRC organization.
- Enterprise-wide responsibility for cybersecurity governance, risk management, compliance, policy, awareness, supplier security, and security assurance oversight.
May require a background check due to job duties requiring routine access to DIRECTV and DIRECTV customer’s proprietary data. Qualified applicants with arrest and conviction will be considered for employment in accordance with local ordinances and state law.
LOCATION
This is a remote position that can be located anywhere in the contiguous United States.
COMPENSATION
DIRECTV's compensation structure is designed to be market-competitive and fully supports efforts to attract and retain employees. It is the company's policy to offer pay that is competitive with other employers in the local market. Our salary ranges are determined by role, level, and location. The Base Salary range displayed below reflects the minimum and maximum target salary for each of DIRECTV's 4 (four) US Labor Market Zones. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.
- DIRECTV WAGE ZONES: $147,830 - $268,307
- Low (N1): $147,830 - $221,645
- Mid (N2): $155,610 - $233,310
- High (N3): $171,171 - $256,641
- Top (N4): $178,952 - $268,307
Click HERE to review information on some of the largest Designated Market Areas (DMAs). Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Please note that the salary ranges reflect base salary only and do not include bonus or benefits - when you consider all of these together, it represents a pretty impressive total compensation package.
EEO STATEMENT
Fair Chance Ordinance Notice for Los Angeles County applying for jobs at DIRECTV
Compliance Notice Regarding Use of Automated Decision-Making Tools in Hiring Process
Apply today!
INTRODUCTION
The Director, Cybersecurity Governance, Risk and Compliance (GRC) is responsible for leading DIRECTV's enterprise cybersecurity governance, risk management, compliance, policy, and security assurance programs. This role provides strategic leadership and operational oversight across cybersecurity governance functions, ensuring cybersecurity risks are effectively managed, regulatory and contractual obligations are met, and cybersecurity initiatives align with business objectives. The Director serves as the primary leader for cybersecurity governance activities, executive cybersecurity reporting, risk management, compliance programs, security awareness initiatives, supplier security oversight, and security assurance testing programs. This position manages a team of cybersecurity professionals and contractors and serves as a key partner to technology, business, audit, legal, procurement, privacy, and executive leadership teams.
ROLE AND RESPONSIBILITIES
Here’s what you’ll do:
Cybersecurity Governance:
- Lead the enterprise Cybersecurity Governance Program.
- Develop and maintain cybersecurity KPIs, KRIs, scorecards, and executive reporting.
- Prepare and facilitate monthly Cybersecurity Governance Reviews and executive presentations.
- Track cybersecurity initiatives, remediation activities, and strategic priorities.
- Drive accountability for cybersecurity performance across the organization.
Cyber Risk Management:
- Lead enterprise cyber risk identification, assessment, reporting, and remediation programs.
- Maintain cybersecurity risk registers and risk treatment plans.
- Facilitate risk reviews with business and technology stakeholders.
- Present cybersecurity risk posture to senior leadership.
Policy, Standards and Governance:
- Own cybersecurity policies, standards, procedures, and governance frameworks.
- Ensure alignment with industry standards and regulatory requirements.
- Maintain governance processes supporting cybersecurity decision-making.
Compliance and Audit:
- Lead cybersecurity compliance activities supporting PCI DSS, SOX, regulatory, and contractual requirements.
- Coordinate internal and external audits.
- Manage remediation efforts resulting from audit findings and assessments.
- Maintain cybersecurity control documentation and evidence repositories.
Third-Party and Supplier Security:
- Lead Supplier Information Security Requirement (SISR) governance and oversight.
- Manage third-party cybersecurity risk assessments and monitoring.
- Partner with Procurement, Legal, and Vendor Management organizations to ensure supplier security compliance.
Security Awareness and Training:
- Lead enterprise cybersecurity awareness, training, and phishing simulation programs.
- Establish metrics to measure effectiveness and maturity.
- Drive continuous improvement of employee cybersecurity culture.
Security Assurance and Testing Programs:
- Provide governance oversight of:
- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Application Penetration Testing
- Infrastructure Penetration Testing
- Vulnerability Assessment Programs
- Ensure testing results are tracked, reported, and remediated appropriately.
Leadership and People Management:
- Lead and develop cybersecurity governance personnel and contractors.
- Manage vendor and consulting relationships supporting GRC activities.
- Establish goals, objectives, and performance measures for the organization.
- Build a scalable governance function supporting DIRECTV's cybersecurity strategy.
BASIC QUALIFICATIONS
What you’ll need to be successful:
Required:
- Bachelor's degree in Cybersecurity, Information Technology, Business, Engineering, or related field.
- 5 – 7 years required, 10+ years desired progressive cybersecurity experience.
- 5+ years of leadership experience managing cybersecurity programs and teams.
- Deep knowledge of cybersecurity governance, risk management, compliance, and security frameworks.
- Experience with PCI DSS, NIST Cybersecurity Framework, ISO 27001, CIS Controls, and risk management methodologies.
- Experience presenting cybersecurity metrics and risk information to executive leadership.
- Strong written and verbal communication skills.
PREFERRED QUALIFICATIONS
- CISSP, CISM, CRISC, CGEIT, PCI ISA, or equivalent certifications.
- Experience leading enterprise cybersecurity governance programs.
- Experience in telecommunications, media, technology, or highly regulated industries.
- Experience building cybersecurity governance organizations during periods of transformation or separation activities.
REPORTING RELATIONSHIP
Reports to: Senior Director, IT & Corporate Cybersecurity
ORGANIZATION SCOPE
- Direct leadership responsibility for Cybersecurity Governance, Risk and Compliance functions.
- Oversight of approximately six contractor resources and future employee growth within the GRC organization.
- Enterprise-wide responsibility for cybersecurity governance, risk management, compliance, policy, awareness, supplier security, and security assurance oversight.
May require a background check due to job duties requiring routine access to DIRECTV and DIRECTV customer’s proprietary data. Qualified applicants with arrest and conviction will be considered for employment in accordance with local ordinances and state law.
LOCATION
This is a remote position that can be located anywhere in the contiguous United States.
COMPENSATION
DIRECTV's compensation structure is designed to be market-competitive and fully supports efforts to attract and retain employees. It is the company's policy to offer pay that is competitive with other employers in the local market. Our salary ranges are determined by role, level, and location. The Base Salary range displayed below reflects the minimum and maximum target salary for each of DIRECTV's 4 (four) US Labor Market Zones. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.
- DIRECTV WAGE ZONES: $147,830 - $268,307
- Low (N1): $147,830 - $221,645
- Mid (N2): $155,610 - $233,310
- High (N3): $171,171 - $256,641
- Top (N4): $178,952 - $268,307
Click HERE to review information on some of the largest Designated Market Areas (DMAs). Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Please note that the salary ranges reflect base salary only and do not include bonus or benefits - when you consider all of these together, it represents a pretty impressive total compensation package.
EEO STATEMENT
Fair Chance Ordinance Notice for Los Angeles County applying for jobs at DIRECTV
Compliance Notice Regarding Use of Automated Decision-Making Tools in Hiring Process
Apply today!
See all 1,163+ Risk Compliance Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Risk Compliance Analyst roles.
Get Access To All JobsTips for Finding Visa Sponsorship as a Risk Compliance Analyst
Target regulated industries first
Banks, insurance carriers, and asset managers face the strictest compliance requirements and hire the most risk analysts. These employers have established sponsorship pipelines and legal teams experienced with H-1B and E-3 filings.
Align your degree to the role
USCIS expects your degree field to match the position. Finance, accounting, economics, statistics, and mathematics all support risk compliance petitions. A business administration degree alone may prompt a Request for Evidence.
Highlight regulatory knowledge in applications
Employers sponsoring compliance analysts need confidence that you understand frameworks like Basel III, Dodd-Frank, or SOX. Demonstrating familiarity with these directly addresses the specialty occupation requirement USCIS scrutinizes most.
Pursue relevant certifications proactively
FRM, CFA, or CRCM credentials strengthen both your candidacy and the sponsorship petition. They signal specialized knowledge that supports the specialty occupation argument, making it easier for employers to justify the visa filing.
Focus on large compliance teams
Firms with dedicated compliance departments sponsor far more frequently than smaller companies. They have the legal infrastructure, HR processes, and budget familiarity to move quickly once they decide to extend an offer.
Browse Migrate Mate for sponsorship-confirmed listings
Migrate Mate filters risk compliance analyst roles by visa sponsorship availability, saving you from applying to employers who won't sponsor. Browse active listings to identify which firms are currently hiring and willing to file.
Frequently Asked Questions
Does risk compliance analyst qualify as a specialty occupation for H-1B purposes?
Yes. Risk compliance analyst roles typically meet the specialty occupation standard because they require a bachelor's degree or higher in a specific field such as finance, accounting, economics, or a related discipline. USCIS has historically approved petitions for this title at strong rates, particularly when the job description references regulatory frameworks, quantitative analysis, or financial risk modeling that clearly necessitate specialized academic training.
Which employers sponsor risk compliance analysts most frequently?
Commercial banks, investment firms, insurance companies, and fintech companies are the most active sponsors. Larger institutions with dedicated compliance divisions, such as major regional and national banks, file H-1B visa petitions regularly for this role. You can browse sponsorship-confirmed risk compliance listings on Migrate Mate to identify which employers are actively hiring and willing to file.
Can I get sponsored on an E-3 visa as an Australian risk compliance analyst?
Yes. Risk compliance analyst is a strong fit for the E-3 visa, which is available exclusively to Australian citizens. The role qualifies as a specialty occupation, and your employer files a Labor Condition Application with the Department of Labor before you attend your consular interview. E-3 visas are issued in two-year increments with no cap, making them particularly practical for compliance professionals with ongoing employment.
Does my degree field matter for a risk compliance analyst sponsorship petition?
It matters significantly. USCIS evaluates whether your specific degree field relates directly to the position. Finance, accounting, economics, statistics, and mathematics are the strongest matches. A general business degree may still qualify, but employers and their attorneys often need to construct a more detailed argument. If your degree is in an unrelated field, relevant certifications like the FRM or documented work experience in financial risk can help support the petition.
What are common reasons a risk compliance analyst H-1B petition gets a Request for Evidence?
The most common trigger is insufficient documentation that the role requires a specific degree rather than just any bachelor's degree. If a job posting lists a degree as preferred rather than required, or if the duties are described broadly, USCIS may issue an RFE. Attorneys typically respond by providing industry data showing that compliance analysts in similar roles routinely hold degrees in finance or accounting, along with a detailed description of the technical duties involved.
What is the prevailing wage requirement for sponsored Risk Compliance Analyst jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.