How to become an Information Security Analyst
Official title: Information Security Analysts
Also called: Information Security Officer, Information Security Specialist, Information Systems Security Analyst, Information Systems Security Officer (ISSO), Information Technology Security Analyst (IT Security Analyst), Network Security Analyst, Security Analyst, Systems Analyst
Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.
Main tasks
- Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
- Monitor current reports of computer viruses to determine when to update virus protection systems.
- Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
- Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
- Modify computer security files to incorporate new software, correct errors, or change individual access status.
- Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
- Document computer security and emergency measures policies, procedures, and tests.
- Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
How to become one
Information security analysts typically need a bachelor's degree in a computer science field, along with related work experience. Employers may prefer to hire analysts who have professional certification.
Typical education to start: Bachelor's degree
Read the full guide from the U.S. Bureau of Labor Statistics
Ways in
- Apprenticeship: Cyber Defense Analyst.
- Apprenticeship: Cybersecurity Analyst (Nof).
- Apprenticeship: Information Technology Specialist (Cb).
- College: Computing & IT degrees, Offered by 34 universities in the US
Pay · Outlook · AI and this job
- Median pay: $129,180 a year The middle half earn $97,810 to $163,500.
- About 192,900 people work in this job now, and about 233,400 are projected by 2035. (+21%)
- People already use generative AI for some of this work. Microsoft Research rates its AI applicability as medium.
Related jobs
- Computer Systems Analysts
- Health Informatics Specialists
- Computer Programmers
- Telecommunications Engineering Specialists
- Computer and Information Research Scientists
- Computer Network Support Specialists
Not sure this is for you? Take the 2-minute career quiz
Questions people ask
How do I become an Information Security Analyst?
Information security analysts typically need a bachelor's degree in a computer science field, along with related work experience. Employers may prefer to hire analysts who have professional certification.
How much does an Information Security Analyst earn in the US?
Median full-time pay is $129,180 a year (U.S. Bureau of Labor Statistics). The middle half earn $97,810 to $163,500.
Is an Information Security Analyst a growing career in the US?
Yes. Employment is projected to grow 21% by 2035, from about 192,900 to about 233,400 people (U.S. Bureau of Labor Statistics).
Do you need a degree to become an Information Security Analyst?
Usually. 72% of people in this job hold a bachelor's degree or higher.
Will AI change the work of an Information Security Analyst?
People already use generative AI for some of this work. Microsoft Research rates its AI applicability as medium.
Sources
- Microsoft Research: Working with AI: AI applicability by occupation (2025-12-22 (built on O*NET 29.0)), CC BY 4.0, retrieved 2026-10-03
- U.S. Bureau of Labor Statistics: Employment Projections (2025-35 (released 2026-08-27)), Public domain (BLS), retrieved 2026-10-03
- U.S. Bureau of Labor Statistics: Occupational Outlook Handbook (2025-35 edition (published 2026-08-27)), Public domain (BLS); photographs excluded, retrieved 2026-10-03
- U.S. Bureau of Labor Statistics: Occupational Employment and Wage Statistics (May 2025), Public domain (BLS), retrieved 2026-10-03
Updated 2026-10-03
This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET is a trademark of USDOL/ETA.