Find your next role
Strengthen your profile
KBR, Inc. - Engineering Services, Defense - XLarge
Average salary for remote Information Security Analyst jobs: $88K–$142K across all experience levels.
Diné Development Corporation - IT Services & Consulting
LexisNexis Risk Solutions Healthcare - Digital Health
Tier One Technologies, LLC - IT Services & Consulting
Grupo TECDATA Engineering - IT Services & Consulting - Scaleup
Information security analysis at the senior level spans a broader scope than cybersecurity operations, encompassing the governance, risk, compliance, and policy dimensions of organizational security alongside technical controls. For senior information security professionals with 10 or more years of experience, this breadth is an advantage in the remote market: the GRC and policy layer of information security is particularly well-suited to distributed work because it is documentation-intensive, framework-driven, and conducted through stakeholder engagement rather than hands-on technical operations. The challenge is positioning that scope clearly in a market that applies cybersecurity and information security titles interchangeably while screening for very different profiles.
The information security analyst title covers a wide range of actual scope, from technical SOC analysis to risk assessment, policy development, compliance audit support, and vendor security review. At the GRC and compliance end, the qualified senior pool is smaller than the title frequency suggests, because the work requires both security depth and organizational communication capability. Senior professionals who have owned information security programs, developed and maintained security policies aligned to regulatory frameworks, managed third-party risk programs, and supported security certifications (ISO 27001, SOC 2, FedRAMP) are operating in a market with more open roles than qualified applicants. The CISO-track GRC profile in particular is consistently undersupplied at companies that are undergoing compliance certification for the first time.
Remote information security hiring is strong at the Senior Analyst and Information Security Manager level, particularly in the GRC and compliance domains. Companies that are pursuing security certifications, expanding into regulated markets, or building their third-party risk programs hire information security professionals remotely because the work is document and framework-based. Senior Information Security Analyst and Information Security Manager roles at SaaS companies undergoing SOC 2 certification, healthcare companies managing HIPAA compliance programs, and financial services companies building vendor risk management functions are among the most consistent remote hiring categories. Director of Information Security roles are increasingly remote at distributed technology companies.
Framework specificity is the first filter. Information security professionals who describe their compliance work in generic terms without naming the specific frameworks they have implemented or managed (ISO 27001, NIST CSF, SOC 2 Type II, HIPAA Security Rule, FedRAMP, PCI DSS) are consistently deprioritized by automated systems that treat framework names as required screening terms. A second filter is the program ownership signal: professionals who have supported compliance audits from an operational support role are screened differently from those who have built and owned the information security management system, and the distinction is not visible without explicit description of program ownership scope. Third, third-party risk management experience has become a specific screening criterion at the senior level as companies have formalized vendor security review programs, and professionals without documented TPRM experience are screened out of roles where it is a primary responsibility.
Explore more remote jobs:
Browse thousands of remote opportunities across all industries
40963 remote jobs
e.g.: Manager - Software Development, Frontend Engineer, Pensions Team (React)
+136 new24989 remote jobs
e.g.: International Account Manager, Sales Development Representative
+128 new12064 remote jobs
e.g.: US Bookkeeper, US Accountant
+112 new10688 remote jobs
e.g.: Quality Specialist - External Network, Project Coordinator
+58 new6208 remote jobs
e.g.: Field Marketing Manager, Taiwan, Senior Marketing Manager (B2B)
+32 new4333 remote jobs
e.g.: Benefits Specialist, Recruiter ID# 369
+37 new3829 remote jobs
e.g.: US Virtual Assistant, Chief Operating Officer
+8 new1349 remote jobs
e.g.: Supply Chain Coordinator, Supply Chain Manager (Dutch-Speaking)
+80 new8550 remote jobs
e.g.: Manager - Software Development, Sr. Software Engineer (Contract)
Whether a remote job is hard to get depends mostly on the role. Our Remote Job Market Index for September 2026 shows applications per new posting ranging from 2.26 times the average in software engineering to 0.19 times in healthcare and life sciences, and what that means for where you aim your search.
Start ReadingA director-level remote search runs through four filters, from location limits and crowded worldwide postings to screening and unadvertised roles. We use our Remote Work Index data to show where searches break down and what to change.
Start ReadingOnly 4% of new remote jobs on Jobgether in September 2026 were open worldwide, and each drew an estimated 8.8 times the average applications. We break down the Remote Work Index, from location limits and competition to the roles and skills that grew while hiring slowed 15.8%.
Start ReadingOur Top 100 Remote Employers 2026 ranks companies by active remote roles on Jobgether, weighted by geographic reach. One in five work in healthcare and life sciences. Here is what the list shows about health, lesser-known employers and location limits, plus how to turn it into a target list.
Start ReadingA section-by-section guide to making an experienced professional's LinkedIn profile stand out, following the order recruiters actually read it, with the specific signals remote searches depend on.
Start Reading
