Career Discovery Tool
Your email has not been verified. Verify email now ›

Information Security Analyst

Overview and Key Facts

People examining computer content
Education
Education
Bachelor's degree
Median Pay
Median Pay
$124,910
Job Growth
Job Growth
28.50%
(Above US Average)
Jobs in 2034
Jobs in 2034
234,900

What Do They Do?

An information security analyst could...

 
system log in prompt
Encrypt communications and data so they cannot be accessed by unauthorized users.
Set up a firewall to protect a company's computer systems from malicious intrusion.
collection of people using laptops, tablets, and phones with overlaid designs of locks
Train other employees on proper computer security procedures.
Customer with credit card
Help protect customers' personal information, like email addresses and credit card numbers.
 
system log in prompt collection of people using laptops, tablets, and phones with overlaid designs of locks Customer with credit card

Overview Listen to this section

Have you ever seen a story on the news about how a company or government agency was "hacked" and people's personal information, like names, addresses, or credit card numbers, was stolen? It is an information security analyst's job to prevent that from happening. Organizations hire information security analysts to analyze possible threats against their computer systems, which can range from malicious hackers trying to steal data to careless employees who accidentally forget to log out of a computer. They then make plans to prevent these threats and to deal with them when they arise. This is an exciting career for those who want to keep up with the constantly changing world of computers and the Internet.
Watch this video to see interviews with multiple experts in the field of information security.
https://www.youtube.com/watch?v=1Gti2emO-uk

Do You Have the Skills and Characteristics of an Information Security Analyst?


  1. Reading Comprehension: ?
  2. Critical Thinking: ?
  3. Active Listening: ?
  4. Complex Problem Solving: ?
  5. Speaking: ?
More skills...

Core Tasks

Think about if you'd like the typical tasks an Information Security Analyst might do:
  • Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
  • Monitor current reports of computer viruses to determine when to update virus protection systems.
  • Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
  • Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
  • Modify computer security files to incorporate new software, correct errors, or change individual access status.
  • Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
  • Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
  • Document computer security and emergency measures policies, procedures, and tests.
  • Monitor use of data files and regulate access to safeguard information in computer files.
  • Coordinate implementation of computer system plan with establishment personnel and outside vendors.
  • Train users and promote security awareness to ensure system security and to improve server and network efficiency.

Salary & Job Openings

Median Salary (Yearly Pay)

Tap or scroll over map to see median salaries for each state
No data available for some states (white on the map)

Future Jobs

Blast-Off:

How Will Information Security Analyst Jobs Grow by 2034?
Projected % Growth
Rapid growth
(10% or higher)
Much faster than average
(7% - 10%)
Faster than average
(5% - 7%)
About as fast as average
(3% - 5%)
Slower than average
(0% - 3%)
Decreasing
Average of all U.S. jobs (5.3%)
Information Security Analyst jobs (28.50%)
Source: https://www.bls.gov/emp/tables/occupational-projections-and-characteristics.htm

Steps to Get There: Becoming an Information Security Analyst

High School Subjects to Study

Aim to study the yellow-shaded subjects.
Math
Algebra 1
Geometry
Algebra 2
Pre-Calculus
Calculus
Statistics
Science
Biology
Chemistry
Physics
Environmental Science
Physiology
Bio-Medical / Biotech
IT &
Engineering
Computer Science
Applied Technology
Drafting & CAD Training
Core
English
Foreign Language
Business
Psychology / Sociology

Education- Typical Degree Needed After High School Listen to this section

Degree
Post
high school credential
AA
Bachelor's
Master's
Doctoral or Professional Degree

Typical degree for an entry-level position: Bachelor's degree ? Types of Degrees and Credentials

Information security analysts usually have a bachelor's degree in computer science, programming, or a related field, but a master's degree could be beneficial. Some schools now offer degrees in information security as the field continues to grow and as demand for qualified employees increases. A master's of business administration (MBA) in information systems may also be preferred, since the security of a company's data (for example, customer credit card information) can have a huge impact on its finances and business operations if that data is breached. An MBA typically requires two additional years of school beyond the undergraduate level.

Many information security analyst positions are not entry-level. Experience in a related field, like database management or systems administration, may be required. Various professional certifications in information security are also available, and may make a prospective employee more attractive to employers. Since the field of information security changes rapidly as computer technology advances, information security analysts must typically pursue continuing professional education, attend conferences and seminars, and read trade publications in order to stay up to date.

With enough experience, information security analysts can advance to managerial positions, like chief security officer or computer and information systems manager, also called information technology (IT) managers.

Companies That Hire Information Security Analysts

Try it Out with an Activity or Project

STEM Activities

STEM activities are fun hands-on explorations that usually take from 10 minutes to one hour and use readily available household or classroom materials while introducing you to STEM concepts common in this career.

Science Project Ideas

Project Ideas are in-depth STEM explorations that have a strong focus on controlling variables, taking accurate measurements, and analyzing data suitable for investigating the scientific method or the engineering design process.

On the Job

Role Models

Watch this interview with Dr. Douglas Twitchell, a professor in information security at Illinois State University.
https://www.youtube.com/watch?v=fWCOndpmDf4

Nature of the Work

Information security analysts are skilled workers who help protect an organization's data from unauthorized access and outside threats. They can work for a variety of organizations, ranging from government agencies that handle classified data, to healthcare organizations that must store sensitive personal information about patients, to large retailers that handle credit card transactions. In all of those cases, the organizations possess information that could cause embarrassment, financial loss, or even a national security threat if the information is compromised or stolen. The threats they must deal with can range from individuals or small groups of hackers, to organized crime or even foreign governments. They must continually stay up-to-date on the latest trends in the information security industry in order to stay one step ahead of hackers and protect their organization's information. As the scale and frequency of cyberattacks continue to increase, the responsibilities of information security analysts may increase as well.

An information security analyst is responsible for analyzing a company's computer systems, possible threats to the systems that could compromise data, and developing and implementing plans to protect that data. They may be responsible for installing defenses, like firewalls, to prevent unauthorized access to a company's systems. Sometimes analysts might not implement their plans directly, but instead make recommendations to management or systems administrators who will then oversee implementation of those plans. They may also prepare reports for management in the event of a security breach, explaining what happened, its impact on the company, and how similar attacks can be prevented in the future.

Information security analysts might be responsible for training other, non-technical employees on proper computer security procedures. This can include protection against physical, not just electronic, theft of data. For example, an employee traveling to a conference with a company laptop that has sensitive information on the hard drive could risk having that laptop stolen at the airport. Someone could take data home on a USB flash drive to work in the evening, then lose the flash drive.

Work Environment

Information security analysts typically spend the majority of their time working in an office environment, usually in front of a computer. They may have meetings with other people in the office during the day, and occasionally travel for conferences and professional meetings. While most analysts work full time (40 hours per week), some may need to be "on call" outside of normal business hours because companies must react immediately in the event of a data breach or security compromise.

Like other workers who spend long periods typing on a computer, information security analysts are susceptible to eyestrain, back discomfort, and hand and wrist problems such as carpal tunnel syndrome or cumulative trauma disorder, but preventative measures can be taken.

More Information

Ask Questions

Do you have a specific question about a career as an Information Security Analyst that isn't answered on this page? Post your question on the Science Buddies Ask an Expert Forum.

Additional Resources

The following organizations provide professional certifications in various areas of cybersecurity:

Sources

Top
Quick Links X
Free science fair projects.