Principal Research Analyst - Information Security

We need to output HTML fragment with sections for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Use

for each heading only if there is real specific content. Must not repeat job title. No Job ID etc. Remove boilerplate like "This position is listed on behalf of a partner company..." etc. Also remove "How Jobgether Works", "Why Apply Through Jobgether?", data privacy notice, etc. Keep substantive info: description of role, accountabilities (responsibilities), requirements, preferred qualifications maybe under Requirements or Qualifications? The instruction: Use headings for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to decide which sections have content. We have: - About the role: description paragraph at start: "This position is listed on behalf of a partner company..." but that's boilerplate? Actually it's about partner company managing applications. Might be considered boilerplate? It's not about role specifics. The role description: "Our partner is looking for a Principal Research Analyst - Information Security based in United States. This role serves as a senior subject matter expert shaping forward-thinking research, guidance, and practical resources across information security and cybersecurity. You’ll translate complex security trends, technologies, frameworks, and industry practices into clear, credible content that helps technology professionals make informed decisions. The position combines deep enterprise security expertise with research, thought leadership, public speaking, and cross-functional collaboration. You’ll work with business teams, marketing, events, leadership, and volunteer subject matter experts to develop and integrate content across publications, conferences, webinars, and other channels. The role provides an opportunity to influence the broader cybersecurity community through research, practitioner guidance, industry engagement, and external representation. You’ll also monitor emerging technologies and security developments, including the responsible adoption and risk implications of artificial intelligence. This position is suited to an experienced cybersecurity professional who brings strong analytical and communication skills, practical enterprise experience, and the ability to turn research into actionable insights." We can put that under About the role. - Responsibilities: The "Accountabilities" list: many bullet points. We'll put those under Responsibilities as

• . - Requirements: The list after "Requirements" includes mandatory requirements: Bachelor’s degree..., at least 8 years..., at least 5 years..., CISM or CISSP required, deep working knowledge..., strong familiarity..., practical knowledge..., proven experience..., demonstrated public-facing..., experience responding..., strong business writing..., excellent critical thinking..., working knowledge of AI..., proven ability to work with vendors..., ability to manage multiple priorities... We'll put those under Requirements. - Qualifications: Preferred qualifications: Master’s degree..., 10+ years..., experience in regulated industries..., direct experience with procurement..., experience in threat intelligence..., AAISM certification. Also willingness to travel. Could be under Qualifications. - Skills: Might be overlapping; but we could extract skills like strong analytical and communication skills, etc. However we already have many in Requirements. Could create Skills section for things like "Strong business writing skills", "Excellent critical thinking, analytical, collaboration, and cross-functional stakeholder engagement skills", "Working knowledge of artificial intelligence technologies". But to avoid duplication, maybe we put skills under Requirements and not create separate Skills unless distinct. The instruction: Prefer a few substantive sections over many thin ones. So we could combine Skills into Requirements or Qualifications. But we need to follow headings list; we can omit sections if no real specific content. So we can omit Skills if we think it's covered. - Benefits: The "Benefits" paragraph includes: Annual salary range..., Benefits package..., Opportunities to participate..., Opportunities to build visible thought leadership..., Collaborative environment..., Opportunities to work with leading security frameworks..., Potential for professional development..., Primarily remote work environment..., Occasional domestic and international travel... We need Pay and Schedule sections only if posting actually states them. Pay: we have salary range. So we need a Pay section with that info. Schedule: we have remote work environment and travel expectations. That's schedule info. So we can create Schedule section. Thus sections: About the role, Responsibilities, Requirements, Qualifications, Benefits, Pay, Schedule. We must not include filler like "commensurate with experience". Not present. We must not repeat job title. Not include Job ID. We must output only HTML fragment, no /, no markdown fences. Let's craft. Structure:

  About the role

  ... (paragraph)

  Responsibilities

  • ...
  ...

  Requirements

  • ...
  ...

  Qualifications

  • ...
  ...

  Benefits

  • ...
  ...

  Pay

  Annual salary range of $113,503–$170,309.

  Schedule

  Primarily remote work environment within the United States, with occasional domestic and international travel for conferences, professional events, workshops, and external meetings.

  We need to ensure we preserve all substantive information. Let's extract details. About the role paragraph: combine sentences. Let's craft a concise paragraph preserving all info. "Our partner is seeking a Principal Research Analyst - Information Security based in the United States. The role serves as a senior subject matter expert shaping forward‑thinking research, guidance, and practical resources across information security and cybersecurity. You will translate complex security trends, technologies, frameworks, and industry practices into clear, credible content that helps technology professionals make informed decisions. The position combines deep enterprise security expertise with research, thought leadership, public speaking, and cross‑functional collaboration. You will work with business teams, marketing, events, leadership, and volunteer subject matter experts to develop and integrate content across publications, conferences, webinars, and other channels. The role provides an opportunity to influence the broader cybersecurity community through research, practitioner guidance, industry engagement, and external representation. You will also monitor emerging technologies and security developments, including the responsible adoption and risk implications of artificial intelligence. This position is suited to an experienced cybersecurity professional who brings strong analytical and communication skills, practical enterprise experience, and the ability to turn research into actionable insights." Now Responsibilities: list each accountability bullet. Let's list them: - Lead the creation, review, and delivery of high-quality information security content, including articles, whitepapers, research reports, audit programs, frameworks, and practitioner aids. - Ensure research and professional practice materials align with established industry standards, relevant frameworks, and strategic priorities. - Serve as a senior internal subject matter expert across information security and related cybersecurity domains. - Recruit, coordinate, and guide volunteer subject matter experts in the development, review, and validation of professional content. - Provide expert guidance throughout research and content development cycles, including publications, practitioner resources, and examination preparation materials. - Represent the organization externally through industry conferences, panels, podcasts, webinars, workshops, and professional events. - Evaluate conference proposals and review presentations to ensure technical accuracy, relevance, and strategic alignment. - Respond to technical inquiries from members and partners, providing practical interpretation of security practices, trends, and emerging issues. - Conduct secondary research, monitor industry developments, and maintain current knowledge of cybersecurity technologies, standards, threats, and practices. - Collaborate with business units, marketing, events, and leadership teams to integrate information security content consistently across member-facing initiatives. - Contribute to strategic communications and brand-building initiatives that strengthen visibility, credibility, and engagement within the global technology ecosystem. - Research vendors and technology markets, evaluate product capabilities, and perform competitive analysis to support research and content development. - Translate complex research findings into clear written reports, presentations, and other practitioner-focused deliverables. - Apply AI responsibly and in accordance with organizational policies when conducting research, developing content, or improving workflows. - Support partnerships and external relationships that advance knowledge and engagement across the information security community. Now Requirements (mandatory): - Bachelor’s degree in cybersecurity, computer science, information systems, or a related field, or an equivalent combination of education and professional experience. - At least 8 years of experience in a relevant cybersecurity, research, advisory, or professional practice role with a demonstrated record of success. - At least 5 years of enterprise information security program experience, including recent experience within the past 24 months securing modern hybrid enterprise environments. - CISM or CISSP certification required. - Deep working knowledge of core cybersecurity domains, including network security, endpoint security, identity and access management, cloud security, application security, and incident response. - Strong familiarity with established security frameworks and taxonomies such as NIST CSF, MITRE ATT&CK, ISO 27001, and CIS Controls. - Practical knowledge of major cloud platforms such as AWS, Azure, and GCP, including cloud security controls and audit considerations. - Proven experience conducting secondary research and producing high-quality research reports and professional content. - Demonstrated public-facing thought leadership experience through conference presentations, webinars, podcasts, published articles, or similar professional forums. - Experience responding to stakeholder inquiries and providing expert guidance on industry practices, trends, and emerging technologies. - Strong business writing skills and the ability to transform complex research into clear, useful content for professional audiences. - Excellent critical thinking, analytical, collaboration, and cross-functional stakeholder engagement skills. - Working knowledge of artificial intelligence technologies, relevant applications, appropriate use cases, and associated information security risks. - Proven ability to work effectively with vendors and assess technology markets, capabilities, and competitive positioning. - Ability to manage multiple priorities, work independently, and collaborate across teams to meet deadlines and strategic objectives. Now Qualifications (preferred): - Master’s degree in cybersecurity, computer science, information systems, or a related discipline. - 10+ years of experience in a comparable role or capacity. - Experience in regulated industries such as financial services, healthcare, or energy, or experience working with regulators and compliance programs. - Direct experience with procurement, implementation, and operationalization of AI technologies. - Experience in threat intelligence, detection engineering, malware or attack analysis, and threat modeling. - AAISM certification. - Willingness to travel primarily domestically, with occasional international travel, for conferences, professional events, workshops, and external meetings. Note: The willingness to travel also appears in Benefits/Scheduling; but we already have schedule. Might duplicate; but we can keep in Qualifications as preferred. However schedule section already mentions travel; we could keep travel mention only in Schedule. But the instruction: preserve ALL substantive information; do not invent or summarize away detail. If we omit travel from Qualifications, we lose that detail. However we have schedule section covering travel. So we can keep travel mention only in Schedule and not duplicate. But the Qualifications list includes willingness to travel as a preferred qualification. If we omit it, we lose that nuance (preferred). But schedule section already says occasional domestic and international travel. That's essentially same. It's not a preferred qualification but a condition. Might be okay to keep only in Schedule. However to be safe, we could include it in Qualifications as well, but then duplicate. The instruction says preserve ALL substantive information; duplication is not prohibited but might be redundant. It didn't forbid duplication. It said do not invent or summarize away detail. Duplication is okay but might be considered thin sections. However we can keep it in Qualifications as preferred and also mention in Schedule; that's fine. Now Benefits: list bullet points. - Annual salary range of $113,503–$170,309. (But we will also have Pay section; maybe we should not duplicate salary in Benefits. The Benefits paragraph originally: "Annual salary range of $113,503–$170,309.Benefits package supporting employee health, wellbeing, and professional needs.Opportunities to participate in industry conferences, professional events, workshops, and other knowledge-sharing activities.Opportunities to build visible thought leadership through research, publications, speaking engagements, webinars, and podcasts.Collaborative environment focused on advancing cyber