{"id":1640556,"url":"https://alion.io/job/isaca-principal-research-analyst-information-security","title":"Principal Research Analyst - Information Security","company":{"id":452085,"name":"Isaca","domain":"isaca.org","url":"https://alion.io/company/isaca-5","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":113503,"max":170309,"currency":"USD","period":"year","gross":null,"usd_annual":170309},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-10-01T22:04:04Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-13T06:05:33Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"About ISACA\nISACA® (www.isaca.org) champions the global workforce advancing trust in technology. For more than 55 years, ISACA has empowered its community of 195,000+ members with the knowledge, credentials, training and network they need to thrive in fields like information security, governance, assurance, risk management, data privacy and emerging tech. With a presence in more than 195 countries and with more than 230 chapters worldwide, ISACA offers resources tailored to every stage of members’ careers-helping them to thrive in a rapidly changing digital landscape, drive trusted innovation and ensure a more secure digital world. Through the ISACA Foundation, ISACA also expands IT and education career pathways, fostering opportunities to grow the next generation of technology professionals.Overview\nA Principal Research Analyst at ISACA leads the development, delivery, and continuous enhancement of high-quality forward-thinking content, guidance, and practitioner aids for their assigned area of expertise, ensuring alignment with ISACA’s Professional Practices Program Strategy and industry standards. This role partners closely with business units, marketing, events teams, and ISACA leadership to integrate practice-area content consistently across conferences, webinars, publications, and other member-facing initiatives. Serving as a subject matter expert in their assigned practice area. This Principal Research Analyst recruits, mobilizes, and guides volunteer SME groups to co-develop and validate content, while providing expert guidance throughout content and research project cycles. The position represents ISACA externally at industry events, panels, and webinars, evaluates conference proposals, and ensures presentations meet technical and strategic standards.\nAdditionally, the role supports knowledge advancement by responding to member inquiries, monitoring trends, and maintaining up-to-date expertise, and contributes to ISACA’s brand and marketing efforts to strengthen organizational visibility and credibility. This position requires consistent demonstration of critical thinking, collaboration, strong communication, analytical skills, and the ability to manage multiple priorities, embodying ISACA’s values of People First, Curiosity, Passion, and Collaboration.\nResponsibilities\nContent Leadership & Development\nLead the creation, review, and delivery of content including articles, audit programs, whitepapers, secondary research reports, and practitioner aids.\nEnsure content aligns with ISACA’s Professional Practices Program Strategy and industry standards.\nProvide input on materials, frameworks, and references to maintain high-quality outputs.\nUse AI responsibly and in compliance with organizational policies\nSubject Matter Expertise & Volunteer Engagement\nServe as internal SME within assigned professional practice (e.g., audit, emerging tech, GRC, information security, privacy).\nRecruit, mobilize, and manage volunteer SME groups to co-develop and validate ISACA content.\nProvide guidance and leadership during content and research project cycles e.g., exam prep materials, journal articles.\nExternal Representation & Thought Leadership\nRepresent ISACA at industry events, panels, podcasts, and webinars to promote the organization’s research and frameworks.\nEvaluate conference proposals and review final presentations for technical and strategic accuracy.\nKnowledge Advancement & Inquiry Support\nRespond to member and partner technical inquiries within area of practice.\nMaintain up-to-date knowledge by attending professional seminars, reviewing literature, and monitoring trends.\nCross-Functional Collaboration\nPartner with business units, marketing, and events teams to ensure consistent, relevant integration of practice-area content across conferences, webinars, podcasts, and publications.\nCollaborate with ISACA leadership to align professional practice content with organizational messaging and priorities.\nStrategic and Brand Support\nSupport ISACA’s marketing and brand-building efforts through strategic communication and collaboration.\nParticipate in activities that foster partnerships and elevate ISACA’s visibility and credibility in the global ecosystem.\nQualifications\nRequired Field of Study:\nBachelor’s Degree in a relevant field of study from an accredited university, or an equivalent combination of education and experience.\nMinimum Years of Experience Required:\nMinimum of 8 years of experience in a similar role or capacity, with a demonstrated record of success.\nExperience responding to stakeholder inquiries, providing expert guidance and practical interpretation of industry practices and trends.\nProven experience collaborating cross-functionally with business teams\nRequired Experience:\nExperience conducting secondary research and reporting\nTrack record of public-facing thought leadership: conference speaking, webinars, podcasts, or published articles\nAdditional 5+ years of enterprise information security program experience; must include recent experience (within past 24 months) securing modern, hybrid enterprise environments.\nFamiliarity with common frameworks and taxonomies (NIST CSF, MITRE ATT&CK, ISO 27001, CIS controls)\nDeep working knowledge of core cybersecurity domains (network, endpoint, IAM, cloud, application security, incident response)\nKnowledge of cloud platforms and cloud control frameworks (AWS/Azure/GCP and cloud audit considerations)\nPreferred Field of Study:\nMaster’s Degree in Cybersecurity, Computer Science, Information Systems, or related field from an accredited university.\nPreferred Years of Experience:\n10+ years of experience in a similar role or capacity, with a demonstrated record of success.\nDescription of Preferred Experience:\nRelated experience in regulated industries (finance, healthcare, energy) or working with regulators and compliance programs\nDirect involvement with procurement, implementation, and operationalization of AI technologies\nExperience with threat intelligence, detection engineering, or malware/attack analysis\nExperience performing threat modeling\nRequired Certifications:\nCISM or CISSP\nPreferred Certifications:\nAAISM\nRequired Competencies/Skills:\nWorking knowledge of artificial intelligence technologies, current applications within assigned area of expertise, identification of appropriate use cases, and related risk.\nVendor and market research - evaluating products, mapping capabilities, and performing competitive analysis\nCritical thinking, collaboration, and cross-functional stakeholder engagement\nBusiness writing\nProven ability to translate research into content deliverables: verbal presentations or written reports\nTravel may be required to attend industry conferences, professional events, workshops, and external meetings. Travel is primarily domestic, with occasional international travel depending on event participation and organizational priorities.\nEqual Opportunity Employer (EEO)\nISACA is proud to be an equal opportunity employer. ISACA is committed to building an environment of diversity, equity, and inclusion where equal employment opportunities are available to all applicants and employees without regard to race, color, religion, sex (including pregnancy and gender identity), national origin, age, ancestry, disability, genetic information, citizenship, sexual orientation, veteran status, marital status, familial status, military discharge status, or any other characteristic or status protected by federal, state, or local law. We support an inclusive workplace where employees excel based on merit, qualifications, experience, and ability.Posted Salary Range\nUSD $113,503.00 - USD $170,309.00 /Yr.Benefits Information\nBenefits Information available below:\nISACA Career Opportunities and Benefits","description_format":"text","description_chars":7786,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Training & Certification","Tech Industry Associations & Clusters"],"lifecycle":[{"event":"open","at":"2026-10-01T22:04:04Z"}],"visa":[],"liveness":{"score":72,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.795,"p_room":0.9,"age_days":11,"expected_fill_days":27,"reasons":["conf:5","velocity","win:mid"],"computed_at":"2026-10-13T05:45:00Z"},"pay":{"stated_usd_annual":170309,"is_top_pay":false},"html_url":"https://alion.io/job/isaca-principal-research-analyst-information-security","json_url":"https://alion.io/job/isaca-principal-research-analyst-information-security.json","meta":{"generated_at":"2026-10-13T11:25:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17618,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":452085},"rest":"https://alion.io/mcp/rest/get_company?id=452085"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fisaca-principal-research-analyst-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fisaca-principal-research-analyst-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fisaca-principal-research-analyst-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/isaca-principal-research-analyst-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fisaca-principal-research-analyst-information-security"}]}