Security And Compliance Jobs in USA with Visa Sponsorship
Security and compliance roles rank among the more sponsorship-friendly positions in tech and finance, with H-1B visa and O-1 visas both viable paths. Employers in regulated industries actively seek credentialed specialists, and demand consistently outpaces domestic supply. For detailed occupation requirements, see the O*NET profile.
Find Security And Compliance JobsOverview
Showing 5 of 1,075+ Security And Compliance jobs
See all 1,075+ Security And Compliance Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security And Compliance roles.
Get Access To All JobsINTRODUCTION
This role may also be located in our Playa Vista, CA campus. Applicants in the County of Los Angeles: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees.
BENEFITS
Benefits for this role include:
- Health, dental, vision, life, disability insurance
- Retirement Benefits: 401(k) with company match
- Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
- Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
- Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
- Baby Bonding Leave: 18 weeks
- Holidays: 13 paid days per year
Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Austin, TX, USA; Los Angeles, CA, USA; Washington D.C., DC, USA.
MINIMUM QUALIFICATIONS
- Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
- 7 years of experience in cybersecurity, technical assurance, IT audit, pen testing, or working within a second line of defense risk management function.
- Experience with enterprise-wide or cross-functional technical project planning and execution, including partnering with legal, policy, or compliance teams.
- Experience designing and executing security control testing methodologies and risk assessments for software, infrastructure, or AI/ML systems.
PREFERRED QUALIFICATIONS
- Advanced degree in Computer Science, Cybersecurity, Artificial Intelligence, or a related field.
- Professional AI security or audit certifications such as CISSP, CISA, CISM, AIGP, AAIA, ISO 27001/42001 Lead Auditor or equivalent technical certifications.
- Experience working within a technology company or "Big Tech" ecosystem, navigating complex, hyper-scale infrastructure and distributed risk environments.
- Proven experience operating in a second line of defense role, including providing separate tests, control testing, and oversight to first-line business and engineering teams.
- Deep technical understanding of AI/ML specific vulnerabilities (e.g., adversarial attacks, training data extraction, prompt injection).
ABOUT THE JOB
The Risk, Compliance and Integrity organization (RCI) brings together critical compliance, assurance, risk, and governance functions across the company to help meet compliance needs and enable our businesses to innovate securely. Operating as a critical second line of defense, we manage our operations through risk-based prioritization, technical validation, oversight, and consistent engagement with product engineering and legal counsel.
In this role, you will demand a deep understanding of AI/ML architectures, offensive security testing methodologies, and threat modeling, coupled with the ability to separately test existing and emerging cybersecurity and AI controls. As a second-line leader, you will need the ability to collaborate effectively across the engineering organization, provide constructive issues, and influence at all levels. In addition to a deep technical security foundation, this role requires exceptional program management capabilities. The successful person will have a demonstrated ability to track, report on, and effectively manage complex technical assurance initiatives from inception to completion. This includes defining clear testing objectives, establishing metrics, monitoring the first line's remediation progress, and ensuring timely and accurate reporting to engineering stakeholders and risk committees.
Individual pay is determined by factors including job-related skills, experience, and relevant education or training. US: $136000 - $197000 (USD) + 15% bonus target + bonus + equity + benefits.
Responsibilities
Learn more about benefits at Google.
- Provide separate oversight and issues as a critical second line of defense function, establishing and maintaining comprehensive technical assurance testing frameworks for AI/ML and traditional security ecosystems.
- Design and execute technical assurance testing across both existing and emerging cybersecurity and AI controls to validate their design and operating effectiveness.
- Lead and coordinate cross-functional security testing initiatives (e.g., targeted control validation, AI red teaming, architecture reviews) to separately assess risks across AI product areas and engineering teams.
- Advocate for AI security assurance, effectively communicating testing results, control deficiencies, threat models, and mitigation strategies to first-line technical leadership, legal counsel and executive stakeholders.
- Enhance awareness of emerging AI threats, translating testing insights into actionable engineering recommendations.
Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
INTRODUCTION
This role may also be located in our Playa Vista, CA campus. Applicants in the County of Los Angeles: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees.
BENEFITS
Benefits for this role include:
- Health, dental, vision, life, disability insurance
- Retirement Benefits: 401(k) with company match
- Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
- Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
- Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
- Baby Bonding Leave: 18 weeks
- Holidays: 13 paid days per year
Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Austin, TX, USA; Los Angeles, CA, USA; Washington D.C., DC, USA.
MINIMUM QUALIFICATIONS
- Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
- 7 years of experience in cybersecurity, technical assurance, IT audit, pen testing, or working within a second line of defense risk management function.
- Experience with enterprise-wide or cross-functional technical project planning and execution, including partnering with legal, policy, or compliance teams.
- Experience designing and executing security control testing methodologies and risk assessments for software, infrastructure, or AI/ML systems.
PREFERRED QUALIFICATIONS
- Advanced degree in Computer Science, Cybersecurity, Artificial Intelligence, or a related field.
- Professional AI security or audit certifications such as CISSP, CISA, CISM, AIGP, AAIA, ISO 27001/42001 Lead Auditor or equivalent technical certifications.
- Experience working within a technology company or "Big Tech" ecosystem, navigating complex, hyper-scale infrastructure and distributed risk environments.
- Proven experience operating in a second line of defense role, including providing separate tests, control testing, and oversight to first-line business and engineering teams.
- Deep technical understanding of AI/ML specific vulnerabilities (e.g., adversarial attacks, training data extraction, prompt injection).
ABOUT THE JOB
The Risk, Compliance and Integrity organization (RCI) brings together critical compliance, assurance, risk, and governance functions across the company to help meet compliance needs and enable our businesses to innovate securely. Operating as a critical second line of defense, we manage our operations through risk-based prioritization, technical validation, oversight, and consistent engagement with product engineering and legal counsel.
In this role, you will demand a deep understanding of AI/ML architectures, offensive security testing methodologies, and threat modeling, coupled with the ability to separately test existing and emerging cybersecurity and AI controls. As a second-line leader, you will need the ability to collaborate effectively across the engineering organization, provide constructive issues, and influence at all levels. In addition to a deep technical security foundation, this role requires exceptional program management capabilities. The successful person will have a demonstrated ability to track, report on, and effectively manage complex technical assurance initiatives from inception to completion. This includes defining clear testing objectives, establishing metrics, monitoring the first line's remediation progress, and ensuring timely and accurate reporting to engineering stakeholders and risk committees.
Individual pay is determined by factors including job-related skills, experience, and relevant education or training. US: $136000 - $197000 (USD) + 15% bonus target + bonus + equity + benefits.
Responsibilities
Learn more about benefits at Google.
- Provide separate oversight and issues as a critical second line of defense function, establishing and maintaining comprehensive technical assurance testing frameworks for AI/ML and traditional security ecosystems.
- Design and execute technical assurance testing across both existing and emerging cybersecurity and AI controls to validate their design and operating effectiveness.
- Lead and coordinate cross-functional security testing initiatives (e.g., targeted control validation, AI red teaming, architecture reviews) to separately assess risks across AI product areas and engineering teams.
- Advocate for AI security assurance, effectively communicating testing results, control deficiencies, threat models, and mitigation strategies to first-line technical leadership, legal counsel and executive stakeholders.
- Enhance awareness of emerging AI threats, translating testing insights into actionable engineering recommendations.
Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
See all 1,075+ Security And Compliance Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security And Compliance roles.
Get Access To All JobsTips for Finding Security And Compliance Jobs
Lead with your certifications
CISSP, CISA, CISM, and SOC 2 expertise are hiring signals that compliance teams recognize immediately. Listing these prominently on your resume tells employers you can contribute from day one, which makes sponsorship a far easier conversation to start.
Target regulated industries first
Financial services, healthcare, and government contractors face the strictest compliance mandates and the most persistent talent shortages. These employers sponsor more consistently than generalist tech companies because qualified candidates are genuinely hard to find domestically.
Understand the specialty occupation bar
H-1B visa approval for security and compliance roles depends on demonstrating the position requires a specific bachelor's degree or higher. Roles tied to frameworks like NIST, ISO 27001, or HIPAA compliance have a stronger track record meeting this standard than generalist security titles.
Frame your degree connection clearly
USCIS scrutinizes whether your degree field directly relates to the role. Information systems, computer science, cybersecurity, and accounting degrees map well to most compliance positions. If your degree is adjacent, document how your coursework and experience bridge the gap.
Prioritize employers with existing LCA filings
Companies that have sponsored security and compliance roles before understand the process and face fewer internal obstacles. Searching for employers with a documented history of filing Labor Condition Applications for similar titles is one of the most practical filtering strategies available.
Use Migrate Mate to find sponsor-ready roles
Not every security and compliance job posting signals sponsorship willingness clearly. Migrate Mate filters for employers actively open to visa sponsorship, saving you from applying to roles where the conversation will stall before it starts.
Frequently Asked Questions
Do security and compliance roles qualify for H-1B visa sponsorship?
Most do, but approval depends on how the position is defined. Roles tied to specific technical frameworks, regulatory standards, or specialized tools, such as a Compliance Analyst implementing HIPAA controls or a Security Engineer working with SIEM platforms, qualify more reliably than broadly scoped titles. The position must require a specific bachelor's degree field, not just any degree.
What degree do I need for an employer to sponsor my H-1B in security or compliance?
Cybersecurity, information systems, computer science, accounting, and finance degrees map cleanly to most roles in this field. USCIS requires the degree to relate directly to the job duties, so a cybersecurity degree for a security analyst role is straightforward. An unrelated degree can still work if supported by transcripts showing relevant coursework and documented professional experience.
Which industries hire the most sponsored security and compliance professionals?
Financial services, healthcare, insurance, and defense contracting are the heaviest sponsors. These industries operate under strict regulatory regimes, FINRA, SEC, HIPAA, and FedRAMP, and face real shortages of qualified compliance talent. Enterprise software companies and cloud providers also sponsor at scale for security engineering and governance roles. Browse current openings by industry on Migrate Mate.
Can I get an O-1A visa for a security or compliance role?
It's possible but requires substantial evidence of distinction in the field. Published research, conference speaking, recognized contributions to security standards, or senior advisory roles at prominent organizations can support an O-1A case. This visa suits principal security architects or compliance leads with an established professional profile rather than earlier-career specialists. An immigration attorney can assess whether your background clears the bar.
How do I identify which compliance and security employers actually sponsor visas?
The most reliable signal is an employer's history of filing Labor Condition Applications for similar roles. Larger financial institutions, healthcare systems, and publicly traded tech companies tend to have established sponsorship programs. Migrate Mate surfaces security and compliance positions from employers who are actively open to sponsorship, removing the guesswork from your job search.
What is the prevailing wage requirement for sponsored Security And Compliance jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.