Information Security Analyst Principal

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Information Security Analyst Principal based in United States.

This role offers the opportunity to strengthen cybersecurity capabilities within a mission-driven environment supporting critical information systems. You will provide expert guidance on security architecture, risk management, compliance, and implementation of protective measures across complex technology environments. The position focuses on improving security posture through proactive analysis, policy alignment, and collaboration with technical and business stakeholders. You will contribute to the design, assessment, and modernization of security solutions while helping teams address evolving cyber threats. Working with federal security frameworks and industry best practices, you will support secure and resilient systems that protect sensitive information. This is an impactful opportunity for an experienced security professional to influence cybersecurity programs and drive meaningful improvements.

Accountabilities:: The Information Security Analyst Principal will provide advanced cybersecurity expertise to support secure system operations, compliance initiatives, and technology improvements. The role requires strong analytical skills, technical knowledge, and the ability to collaborate with internal teams and security stakeholders.

Provide cybersecurity support and guidance for information systems, security infrastructure, and operational security initiatives.

Analyze system designs and architectures to ensure appropriate security controls and protection mechanisms are incorporated.

Support security assessments, impact analyses, and implementation activities for system changes and development initiatives.

Assist with the deployment of cybersecurity countermeasures, mitigating controls, and risk reduction strategies.

Develop, maintain, and improve security documentation including System Security Plans, security procedures, manuals, and operational guidelines.

Manage security remediation activities, including responses and resolution tracking for Plans of Action and Milestones (POA&Ms).

Monitor evolving cybersecurity requirements, including emerging practices such as Zero Trust and Software Bill of Materials (SBOM), and communicate their impact.

Serve as a liaison between technical teams and security organizations to align priorities and security objectives.

Support compliance with federal security policies, standards, and risk management frameworks.

Participate in special projects and continuous improvement initiatives related to information assurance and cybersecurity.

Requirements:

The ideal candidate is an experienced cybersecurity professional with a strong background in information security, risk management, and secure system design within complex technology environments.

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related technical discipline with 10+ years of relevant experience, or equivalent advanced education and experience.

Strong experience implementing and monitoring IT security solutions.

Expert knowledge of data security administration principles, methods, and best practices.

Broad understanding of cybersecurity practices, tools, controls, and risk management approaches.

Experience analyzing security requirements and integrating security functions into system architecture.

Knowledge of federal security standards and frameworks, including FIPS 199, FIPS 200, and NIST SP 800-53.

Understanding of network configuration, security monitoring, authentication methods, domain structures, and digital signatures.

Familiarity with Agile software development lifecycle (SDLC) methodologies.

Experience creating and maintaining security documentation and operational procedures.

Security certifications such as CISSP or CISA are highly valued.

Strong communication skills with the ability to collaborate with technical teams, stakeholders, and security organizations.

Ability to stay current with emerging cybersecurity trends and technologies.

Preferred qualifications include:

Experience with electronic healthcare technologies and healthcare IT operations.

Familiarity with source code control and version management tools.

Knowledge of electronic health record platforms or healthcare information systems.

Understanding of enterprise lifecycle management processes in government environments.

Benefits:

Competitive salary range of approximately $97,968 - $132,250 annually, based on experience, location, and other business factors.

Remote work flexibility within the United States.

Full-flex work week supporting work-life balance.

Comprehensive medical, dental, and vision insurance options.

401(k) retirement plan with employer matching.

Paid vacation, holidays, and additional leave programs.

Paid parental, military, bereavement, and jury duty leave.

Opportunities for professional growth, certifications, and continued education.

Access to internal career mobility resources and development opportunities.

Opportunity to work on challenging cybersecurity initiatives with meaningful real-world impact.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1