Principal Research Analyst – Information Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Principal Research Analyst leading ISACA’s information security research, frameworks, and practitioner content. Representing the global technology association through thought leadership, events, and member guidance.
Responsibilities:
- Lead the creation, review, and delivery of articles, audit programs, whitepapers, secondary research reports, and practitioner aids
- Ensure content aligns with ISACA’s Professional Practices Program Strategy and industry standards
- Provide input on materials, frameworks, and references to maintain high-quality outputs
- Use AI responsibly and in compliance with organizational policies
- Serve as an internal subject matter expert in information security and related professional practices
- Recruit, mobilize, and manage volunteer SME groups to co-develop and validate ISACA content
- Provide guidance and leadership during content and research project cycles
- Represent ISACA at industry events, panels, podcasts, and webinars
- Evaluate conference proposals and review final presentations for technical and strategic accuracy
- Respond to member and partner technical inquiries
- Maintain current expertise through professional seminars, literature review, and trend monitoring
- Partner with business units, marketing, and events teams to integrate practice-area content across conferences, webinars, podcasts, and publications
- Collaborate with ISACA leadership to align content with organizational messaging and priorities
- Support ISACA marketing and brand-building efforts
- Participate in activities that foster partnerships and elevate ISACA’s visibility and credibility
Requirements:
- Bachelor’s Degree in a relevant field of study from an accredited university, or an equivalent combination of education and experience
- Minimum of 8 years of experience in a similar role or capacity, with a demonstrated record of success
- Experience responding to stakeholder inquiries and providing expert guidance and practical interpretation of industry practices and trends
- Proven experience collaborating cross-functionally with business teams
- Experience conducting secondary research and reporting
- Track record of public-facing thought leadership: conference speaking, webinars, podcasts, or published articles
- Additional 5+ years of enterprise information security program experience, including recent experience within the past 24 months securing modern, hybrid enterprise environments
- Familiarity with NIST CSF, MITRE ATT&CK, ISO 27001, and CIS Controls
- Deep working knowledge of network, endpoint, IAM, cloud, application security, and incident response domains
- Knowledge of AWS, Azure, or GCP and cloud control frameworks and audit considerations
- Required CISM or CISSP certification
- Working knowledge of artificial intelligence technologies, current applications, appropriate use cases, and related risks
- Experience evaluating vendors and markets, mapping capabilities, and performing competitive analysis
- Critical thinking, collaboration, and cross-functional stakeholder engagement
- Business writing skills
- Proven ability to translate research into verbal presentations or written reports
- Master’s Degree in Cybersecurity, Computer Science, Information Systems, or related field is preferred
- 10+ years of experience in a similar role or capacity is preferred
- Preferred experience in regulated industries or with regulators and compliance programs
- Preferred experience with procurement, implementation, and operationalization of AI technologies
- Preferred experience with threat intelligence, detection engineering, malware/attack analysis, and threat modeling
- Preferred AAISM certification
Benefits:
- Remote work
- Travel opportunities to industry conferences, professional events, workshops, and external meetings
- Occasional international travel depending on event participation and organizational priorities
Similar Jobs
IT Security Analyst
IT Security Analyst supporting Signode’s SOC through threat detection, incident response, and malware analysis. Monitoring alerts, hunting threats, and improving security operations processes.
Associate Security Analyst
Security Analyst monitoring client environments, investigating threats, and tuning SIEM detections. DirectDefense delivers managed cybersecurity defense, vulnerability assessments, and compliance services.
Security Analyst
T1 Security Analyst investigating security incidents and logs for Playtech, a global gaming technology company. Supporting incident response and security infrastructure across 24/7 operations.
Analista de Seguridad de la Información – Semi Senior
Analista de Seguridad de la Información apoyando la operación de ciberseguridad de Stefanini. Monitoreando alertas, afinando reglas y analizando riesgos, vulnerabilidades y controles.
Information Security Compliance Analyst
Information security compliance analyst supporting ImageTrend’s healthcare and emergency-response software platforms. Coordinating audits, risk management, cloud compliance, and security controls across AWS and Azure.
Information Security Analyst
Information Security Analyst defending Satellite Office’s global brand portfolio from cyber threats. Hunting threats, responding to major incidents, and strengthening protection across 2,000+ IT assets.
Security Analyst – Third Shift
Security Analyst investigating alerts and incidents for nuHarbor’s managed cybersecurity services. Executing response actions and escalating high-severity findings for client protection.
Security Analyst
Security Analyst supporting Sprezzatura’s secure VA.gov Platform and federal ATO lifecycle. Translating cybersecurity requirements into engineering guidance, documentation, assessments, and compliance actions.
Security Analyst II
Security Analyst II defending Netrix Global client environments and infrastructure through 24/7 SOC monitoring. Investigating incidents, improving SIEM detections, hunting threats, and automating security operations.
Information Security Analyst, Mid-Level – DevSecOps
DevSecOps analyst securing AWS environments and CI/CD pipelines for SGA’s corporate systems. Automating vulnerability remediation, secrets management, and Secure by Design practices.
Senior Security Analyst
Senior Security Analyst strengthening GRC, compliance, and cloud security. Protecting mortgage-finance systems and data at AI-native operating system company Valon.
Consultant – Global Security Analyst
Security Analyst monitoring and investigating Microsoft-centric security incidents for Austrian and international clients. Developing detections, playbooks and automations across SIEM, XDR, EDR and cloud security.
Staff Cybersecurity Analyst
Staff Cybersecurity Analyst securing D-Wave’s quantum computing systems, software, and cloud services. Leading threat detection, incident response, vulnerability management, and enterprise resilience.
AI Security Analyst
AI Security Analyst securing generative AI, LLM, and agentic systems at 8am, a business-management software company. Supporting SOC monitoring, AI governance, risk management, compliance, and incident response.
ISSO / RMF Cybersecurity Analyst
ISSO/RMF Cybersecurity Analyst guiding federal IT systems through RMF and ATO compliance. Managing security controls, vulnerabilities, continuous monitoring, and incident response for Xcelerate Solutions.
Mid-Level Information Security Analyst, MSS
Analista de Segurança da Informação monitorando SOC, SIEM, Microsoft 365 Defender e firewalls para cliente empresarial da SEK. Atuando em incidentes, investigações e melhorias de segurança.
Cybersecurity Analyst, Consultant
Cybersecurity analyst protecting CybelAngel clients through alert investigation, leak detection, and incident reporting. Supporting cybersecurity solutions and contributing to dark-web research and product improvements.
Information Security Analyst
Information Security Analyst supporting IAM access provisioning, audits, and identity lifecycle management. Resolving access issues for corporate applications and systems across the United States.
National Security Analyst
National Security Analyst supporting U.S. Navy outreach events and public affairs at GDIT. Planning Fleet Weeks, Navy Weeks, executive engagements, and media activities.
Senior Information Security Analyst
Senior Information Security Analyst strengthening Golden 1 Credit Union’s cybersecurity controls. Leading vulnerability management, threat hunting, incident response, and compliance support for a California credit union.