Principal Research Analyst - Information Security

Accountabilities:

• Lead the creation, review, and delivery of high-quality information security content, including articles, whitepapers, research reports, audit programs, frameworks, and practitioner aids.
• Ensure research and professional practice materials align with established industry standards, relevant frameworks, and strategic priorities.
• Serve as a senior internal subject matter expert across information security and related cybersecurity domains.
• Recruit, coordinate, and guide volunteer subject matter experts in the development, review, and validation of professional content.
• Provide expert guidance throughout research and content development cycles, including publications, practitioner resources, and examination preparation materials.
• Represent the organization externally through industry conferences, panels, podcasts, webinars, workshops, and professional events.
• Evaluate conference proposals and review presentations to ensure technical accuracy, relevance, and strategic alignment.
• Respond to technical inquiries from members and partners, providing practical interpretation of security practices, trends, and emerging issues.
• Conduct secondary research, monitor industry developments, and maintain current knowledge of cybersecurity technologies, standards, threats, and practices.
• Collaborate with business units, marketing, events, and leadership teams to integrate information security content consistently across member-facing initiatives.
• Contribute to strategic communications and brand-building initiatives that strengthen visibility, credibility, and engagement within the global technology ecosystem.
• Research vendors and technology markets, evaluate product capabilities, and perform competitive analysis to support research and content development.
• Translate complex research findings into clear written reports, presentations, and other practitioner-focused deliverables.
• Apply AI responsibly and in accordance with organizational policies when conducting research, developing content, or improving workflows.
• Support partnerships and external relationships that advance knowledge and engagement across the information security community.

Requirements:

• Bachelor’s degree in cybersecurity, computer science, information systems, or a related field, or an equivalent combination of education and professional experience.
• At least 8 years of experience in a relevant cybersecurity, research, advisory, or professional practice role with a demonstrated record of success.
• At least 5 years of enterprise information security program experience, including recent experience within the past 24 months securing modern hybrid enterprise environments.
• CISM or CISSP certification required.
• Deep working knowledge of core cybersecurity domains, including network security, endpoint security, identity and access management, cloud security, application security, and incident response.
• Strong familiarity with established security frameworks and taxonomies such as NIST CSF, MITRE ATT&CK, ISO 27001, and CIS Controls.
• Practical knowledge of major cloud platforms such as AWS, Azure, and GCP, including cloud security controls and audit considerations.
• Proven experience conducting secondary research and producing high-quality research reports and professional content.
• Demonstrated public-facing thought leadership experience through conference presentations, webinars, podcasts, published articles, or similar professional forums.
• Experience responding to stakeholder inquiries and providing expert guidance on industry practices, trends, and emerging technologies.
• Strong business writing skills and the ability to transform complex research into clear, useful content for professional audiences.
• Excellent critical thinking, analytical, collaboration, and cross-functional stakeholder engagement skills.
• Working knowledge of artificial intelligence technologies, relevant applications, appropriate use cases, and associated information security risks.
• Proven ability to work effectively with vendors and assess technology markets, capabilities, and competitive positioning.
• Ability to manage multiple priorities, work independently, and collaborate across teams to meet deadlines and strategic objectives.
• Preferred: Master’s degree in cybersecurity, computer science, information systems, or a related discipline.
• Preferred: 10+ years of experience in a comparable role or capacity.
• Preferred: Experience in regulated industries such as financial services, healthcare, or energy, or experience working with regulators and compliance programs.
• Preferred: Direct experience with procurement, implementation, and operationalization of AI technologies.
• Preferred: Experience in threat intelligence, detection engineering, malware or attack analysis, and threat modeling.
• Preferred: AAISM certification.
• Willingness to travel primarily domestically, with occasional international travel, for conferences, professional events, workshops, and external meetings.

Benefits:

• Annual salary range of $113,503–$170,309.
• Benefits package supporting employee health, wellbeing, and professional needs.
• Opportunities to participate in industry conferences, professional events, workshops, and other knowledge-sharing activities.
• Opportunities to build visible thought leadership through research, publications, speaking engagements, webinars, and podcasts.
• Collaborative environment focused on advancing cybersecurity knowledge and professional practices.
• Opportunities to work with leading security frameworks, emerging technologies, cloud environments, and evolving information security challenges.
• Potential for professional development and continued advancement within the information security and research field.
• Primarily remote work environment within the United States.
• Occasional domestic and international travel connected to professional and organizational priorities.