Find your next role
Strengthen your profile
Sprinto - RegTech (Regulatory & Compliance Technology) - Scaleup
BlueCross BlueShield of Tennessee - Health Insurance (Payers) - XLarge
Average salary for remote Information Security Analyst jobs: $140K–$174K across all experience levels.
Southern New Hampshire University - Education Administration
Mondelēz International - Food & Beverage Manufacturing - XLarge
CACI International Inc - IT Services & IT Consulting
General Dynamics Information Technology - IT Services & IT Consulting - XLarge
Atlas Technica - IT Infrastructure & Managed Services - Scaleup
Cision - Public Relations & Communications - Large
Major League Baseball (MLB) - Sports & Athletics - Large
Tabula Rasa HealthCare - Digital Health & Health Tech - Large
Elsevier - Information Services & Data Providers - XLarge
Human API - API & Integration Platforms (iPaaS) - Scaleup
Information security analysis at the senior level spans a broader scope than cybersecurity operations, encompassing the governance, risk, compliance, and policy dimensions of organizational security alongside technical controls. For senior information security professionals with 10 or more years of experience, this breadth is an advantage in the remote market: the GRC and policy layer of information security is particularly well-suited to distributed work because it is documentation-intensive, framework-driven, and conducted through stakeholder engagement rather than hands-on technical operations. The challenge is positioning that scope clearly in a market that applies cybersecurity and information security titles interchangeably while screening for very different profiles.
The information security analyst title covers a wide range of actual scope, from technical SOC analysis to risk assessment, policy development, compliance audit support, and vendor security review. At the GRC and compliance end, the qualified senior pool is smaller than the title frequency suggests, because the work requires both security depth and organizational communication capability. Senior professionals who have owned information security programs, developed and maintained security policies aligned to regulatory frameworks, managed third-party risk programs, and supported security certifications (ISO 27001, SOC 2, FedRAMP) are operating in a market with more open roles than qualified applicants. The CISO-track GRC profile in particular is consistently undersupplied at companies that are undergoing compliance certification for the first time.
Remote information security hiring is strong at the Senior Analyst and Information Security Manager level, particularly in the GRC and compliance domains. Companies that are pursuing security certifications, expanding into regulated markets, or building their third-party risk programs hire information security professionals remotely because the work is document and framework-based. Senior Information Security Analyst and Information Security Manager roles at SaaS companies undergoing SOC 2 certification, healthcare companies managing HIPAA compliance programs, and financial services companies building vendor risk management functions are among the most consistent remote hiring categories. Director of Information Security roles are increasingly remote at distributed technology companies.
Framework specificity is the first filter. Information security professionals who describe their compliance work in generic terms without naming the specific frameworks they have implemented or managed (ISO 27001, NIST CSF, SOC 2 Type II, HIPAA Security Rule, FedRAMP, PCI DSS) are consistently deprioritized by automated systems that treat framework names as required screening terms. A second filter is the program ownership signal: professionals who have supported compliance audits from an operational support role are screened differently from those who have built and owned the information security management system, and the distinction is not visible without explicit description of program ownership scope. Third, third-party risk management experience has become a specific screening criterion at the senior level as companies have formalized vendor security review programs, and professionals without documented TPRM experience are screened out of roles where it is a primary responsibility.
Explore more remote jobs:
Browse thousands of remote opportunities across all industries
47320 remote jobs
e.g.: Lead Engineer, Principal Software Engineer Lead
+174 new26741 remote jobs
e.g.: Corporate Business Sales Executive - Remote, Sales Development Representative
+104 new13277 remote jobs
e.g.: XTN-62D3749 | SENIOR PAYROLL SPECIALIST, XTN-DC15177 | PAYROLL, INVOICING & ACCOUNTS SPECIALIST
+120 new12057 remote jobs
e.g.: SRM Production Program Manager, Principal Statistician - Early Phase - Fully home based (remote anywhere in Europe) Sponsor Dedicated - Program/Project Leader
+40 new4731 remote jobs
e.g.: Mid/Senior Talent Acquisition Specialist – Fully Remote (Europe), Talent Acquisition Specialist
+26 new4218 remote jobs
e.g.: Personal VIP Manager (Morning Schedule), Vice President Sales, Public Sector (U.S. and Canada)
+15 new1468 remote jobs
e.g.: Global Category Manager, Commercial, Crewing Manager – Training, Logistics & Crewing
+48 new10316 remote jobs
e.g.: Principal Software Engineer Lead, Full-Stack Developer (Junior to Mid-Level)
+73 new8308 remote jobs
e.g.: Corporate Business Sales Executive - Remote, Sr Account Manager – Healthcare OEM (Midwest US Preferred)
A Director-level remote resume has to prove scope and remote operating ability at the same time, and most only do the first. This article covers what counts as scope evidence, the remote proof almost no resume includes, and a thirty minute tailoring pass for a specific posting.
Start ReadingThe overqualified label is decided by how you target roles, not by how you edit your resume. This article gives the method, including how to read a role's ceiling, what to say in the first three sentences, and what each rejection pattern tells you to correct.
Start ReadingBeing called overqualified for remote jobs is usually a screening shorthand for cost, retention, and management worries, not a verdict on skill. This article explains the structural cause and four corrections that work.
Start ReadingA channel-by-channel guide to where experienced professionals find remote roles in 2026. It covers why general job boards are the most crowded option, how remote-focused platforms and remote-first careers pages help, how to reach roles that are never posted, when to contact hiring managers, and how to track which channels work.
Start ReadingA diagnostic look at why experienced professionals get no response after dozens of remote applications. It breaks the silence into four stops, roles that were never open, exact-match filters, fast human reads, and non-response, and explains what each one signals and how to correct it.
Start ReadingA practical guide for professionals with 10+ years of experience on applying for remote roles in 2026. It covers why the old approach stalls, how to diagnose fit, how to verify location rules and ghost jobs, how to present a long career, and why direct outreach converts better than the portal alone.
Start Reading
