Remote Information Security Analyst Jobs

78 jobs
Sort by:
Artefact

Artefact - Artificial Intelligence & Machine Learning Services - Large

Remote from
Sao Paulo
PlanIT Group, LLC

PlanIT Group, LLC - Staffing & Recruiting

Remote from
Virginia (USA)

Pro Tip

Average salary for remote Information Security Analyst jobs: $73K$77K across all experience levels.

New York University

New York University - Higher Education - Large

Remote from
United States, Austria, New York (USA)
Secfix

Secfix - RegTech (Regulatory & Compliance Technology) - Startup

Remote from
Europe
Dotdigital

Dotdigital - Computer Software / SaaS - SME

Remote from
Africa, United Kingdom
Secfix

Secfix - RegTech (Regulatory & Compliance Technology) - Startup

Remote from
Europe
Georgia Farm Bureau

Georgia Farm Bureau - Professional & Trade Associations - Large

Remote from
United States
Student Choice

Student Choice - Consumer & Commercial Lending - SME

Remote from
United States
Aptos Labs

Aptos Labs - Blockchain, Crypto & Web3

Remote from
United States, European Union
Remote from
United States
UBC

UBC - Contract Research Organizations (CRO) - Large

Remote from
United States
Remote from
United States
Buyers Edge Platform

Buyers Edge Platform - Computer Software / SaaS - SME

Remote from
Anywhere
Grupo TECDATA Engineering

Grupo TECDATA Engineering - IT Services & IT Consulting - Scaleup

Remote from
Anywhere
Perfict

Perfict - Staffing & Recruiting - Scaleup

Remote from
Anywhere

Remote Information Security Analysis: What Senior Professionals Need to Know in 2026

Information security analysis at the senior level spans a broader scope than cybersecurity operations, encompassing the governance, risk, compliance, and policy dimensions of organizational security alongside technical controls. For senior information security professionals with 10 or more years of experience, this breadth is an advantage in the remote market: the GRC and policy layer of information security is particularly well-suited to distributed work because it is documentation-intensive, framework-driven, and conducted through stakeholder engagement rather than hands-on technical operations. The challenge is positioning that scope clearly in a market that applies cybersecurity and information security titles interchangeably while screening for very different profiles.

78+
Open remote roles tracked
Salary range
$73k – $77k
16+
New roles added this week

Is the Remote Information Security Analyst Market Saturated?

The information security analyst title covers a wide range of actual scope, from technical SOC analysis to risk assessment, policy development, compliance audit support, and vendor security review. At the GRC and compliance end, the qualified senior pool is smaller than the title frequency suggests, because the work requires both security depth and organizational communication capability. Senior professionals who have owned information security programs, developed and maintained security policies aligned to regulatory frameworks, managed third-party risk programs, and supported security certifications (ISO 27001, SOC 2, FedRAMP) are operating in a market with more open roles than qualified applicants. The CISO-track GRC profile in particular is consistently undersupplied at companies that are undergoing compliance certification for the first time.

What Seniority Level Actually Gets Hired Remotely?

Remote information security hiring is strong at the Senior Analyst and Information Security Manager level, particularly in the GRC and compliance domains. Companies that are pursuing security certifications, expanding into regulated markets, or building their third-party risk programs hire information security professionals remotely because the work is document and framework-based. Senior Information Security Analyst and Information Security Manager roles at SaaS companies undergoing SOC 2 certification, healthcare companies managing HIPAA compliance programs, and financial services companies building vendor risk management functions are among the most consistent remote hiring categories. Director of Information Security roles are increasingly remote at distributed technology companies.

Why Do Senior Information Security Professionals Get Filtered Out?

Framework specificity is the first filter. Information security professionals who describe their compliance work in generic terms without naming the specific frameworks they have implemented or managed (ISO 27001, NIST CSF, SOC 2 Type II, HIPAA Security Rule, FedRAMP, PCI DSS) are consistently deprioritized by automated systems that treat framework names as required screening terms. A second filter is the program ownership signal: professionals who have supported compliance audits from an operational support role are screened differently from those who have built and owned the information security management system, and the distinction is not visible without explicit description of program ownership scope. Third, third-party risk management experience has become a specific screening criterion at the senior level as companies have formalized vendor security review programs, and professionals without documented TPRM experience are screened out of roles where it is a primary responsibility.

Frequently Asked Questions

How is information security analyst different from cybersecurity analyst in the remote market?
In practice the titles overlap, but information security analysis in its current market usage tends to emphasize the governance, risk, and compliance dimensions of organizational security alongside technical controls. Cybersecurity analyst roles tend to emphasize technical security operations, threat detection, and incident response. Senior professionals should identify which dimension their experience emphasizes and target roles accordingly rather than applying generically to both.
What compliance frameworks should senior information security analysts highlight for remote roles?
ISO 27001 implementation and certification management is the most universally valued framework experience globally. SOC 2 Type II audit ownership is highly valued at SaaS and technology companies. HIPAA Security Rule program management is essential for healthcare-adjacent roles. NIST CSF implementation is the standard for US federal and regulated industry roles. FedRAMP authorization management is a niche but highly compensated specialization.
Is third-party risk management a growing category for remote senior information security roles?
Yes, significantly. As companies have formalized vendor security requirements, built software supply chain risk programs, and responded to high-profile third-party breach incidents, TPRM has become a dedicated function at larger companies and a senior-level responsibility at mid-size companies. Senior information security professionals with documented TPRM program ownership are in consistent demand in the remote market.
What industries hire senior information security analysts for remote roles most consistently?
SaaS and technology companies undergoing compliance certification have the highest volume. Healthcare organizations, financial services firms, and government contractors with ongoing compliance program management follow. Consulting firms providing information security advisory and compliance readiness services hire senior information security professionals remotely at consistent rates.

Top Countries Hiring Information Security Analyst Remotely

Explore by Category

Browse thousands of remote opportunities across all industries

+686 new

Data, IT & Product

42074 remote jobs

e.g.: Technical Product Manager (f/m/x), Project Manager

+284 new

Sales

16829 remote jobs

e.g.: Account Executive - Field Integrated Solutions (Remote), Account Executive

+275 new

Marketing & Communication

13620 remote jobs

e.g.: Associate Manager, Customer Success, Strategic Accounts Manager, Multi-Family

+185 new

Customer Service

8444 remote jobs

e.g.: Associate Manager, Customer Success, Strategic Accounts Manager, Multi-Family

+154 new

Finance, Accounting & Audit

8434 remote jobs

e.g.: Vice President Payroll - Enterprise Remote, Staff Engineer, ERP Oracle Cloud SCM Functional Consultant

+114 new

Other

8104 remote jobs

e.g.: BIM Tutor, Registered Nurse - Virtual Nurse Observation (VNO) - FT Nights (NOT a remote position)

+98 new

Strategy & Consulting

7198 remote jobs

e.g.: Crisis Care Consultant, Data Migration Consultant

+131 new

Business & Operation

6711 remote jobs

e.g.: Project Manager, Hospital Coding Quality Specialist - Inpatient / Outpatient

+60 new

Human Resources

2507 remote jobs

e.g.: Global Tech - Change Management Officer, Senior Manager - HR Transformation & Operations

About Information Security Analyst Jobs

Are you looking for a Remote Information Security Analyst Jobs?

Discover remote, long-term, fixed-term, part-time, and flexible jobs

Compete Smarter. Land Sooner.

The remote market is already moving. Do not just apply. Compete.

Let your AI coach guide you through the noise and into your next opportunity.

For less than $1 a day. No contract. Cancel anytime.