Note: The job is a remote job and is open to candidates in USA. ISACA champions the global workforce advancing trust in technology through knowledge, credentials, training, and professional resources. The Principal Research Analyst leads the development and delivery of information security content and practitioner guidance, serves as a subject matter expert, manages volunteer contributors, represents ISACA externally, and collaborates across teams to advance research and organizational visibility.
Responsibilities
- Lead the creation, review, and delivery of content including articles, audit programs, whitepapers, secondary research reports, and practitioner aids
- Ensure content aligns with ISACA’s Professional Practices Program Strategy and industry standards
- Provide input on materials, frameworks, and references to maintain high-quality outputs
- Use AI responsibly and in compliance with organizational policies
- Serve as internal SME within assigned professional practice (e.g., audit, emerging tech, GRC, information security, privacy)
- Recruit, mobilize, and manage volunteer SME groups to co-develop and validate ISACA content
- Provide guidance and leadership during content and research project cycles e.g., exam prep materials, journal articles
- Represent ISACA at industry events, panels, podcasts, and webinars to promote the organization’s research and frameworks
- Evaluate conference proposals and review final presentations for technical and strategic accuracy
- Respond to member and partner technical inquiries within area of practice
- Maintain up-to-date knowledge by attending professional seminars, reviewing literature, and monitoring trends
- Partner with business units, marketing, and events teams to ensure consistent, relevant integration of practice-area content across conferences, webinars, podcasts, and publications
- Collaborate with ISACA leadership to align professional practice content with organizational messaging and priorities
- Support ISACA’s marketing and brand-building efforts through strategic communication and collaboration
- Participate in activities that foster partnerships and elevate ISACA’s visibility and credibility in the global ecosystem
Skills
- * Bachelor's Degree in a relevant field of study from an accredited university, or an equivalent combination of education and experience
- * Minimum of 8 years of experience in a similar role or capacity, with a demonstrated record of success
- * Experience responding to stakeholder inquiries, providing expert guidance and practical interpretation of industry practices and trends
- * Proven experience collaborating cross-functionally with business teams
- * Experience conducting secondary research and reporting
- * Track record of public-facing thought leadership: conference speaking, webinars, podcasts, or published articles
- * Additional 5+ years of enterprise information security program experience; must include recent experience (within past 24 months) securing modern, hybrid enterprise environments
- * Familiarity with common frameworks and taxonomies (NIST CSF, MITRE ATT&CK, ISO 27001, CIS controls)
- * Deep working knowledge of core cybersecurity domains (network, endpoint, IAM, cloud, application security, incident response)
- * Knowledge of cloud platforms and cloud control frameworks (AWS/Azure/GCP and cloud audit considerations)
- * CISM or CISSP
- * Working knowledge of artificial intelligence technologies, current applications within assigned area of expertise, identification of appropriate use cases, and related risk
- * Vendor and market research – evaluating products, mapping capabilities, and performing competitive analysis
- * Critical thinking, collaboration, and cross-functional stakeholder engagement
- * Business writing
- * Proven ability to translate research into content deliverables: verbal presentations or written reports
- Travel may be required to attend industry conferences, professional events, workshops, and external meetings. Travel is primarily domestic, with occasional international travel depending on event participation and organizational priorities
- * Master's Degree in Cybersecurity, Computer Science, Information Systems, or related field from an accredited university
- * 10+ years of experience in a similar role or capacity, with a demonstrated record of success
- * Related experience in regulated industries (finance, healthcare, energy) or working with regulators and compliance programs
- * Direct involvement with procurement, implementation, and operationalization of AI technologies
- * Experience with threat intelligence, detection engineering, or malware/attack analysis
- * Experience performing threat modeling
- * AAISM
Benefits
- Remote work
Company Overview
Company H1B Sponsorship