Computers and math
Information security analyst
Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.
Median pay
$129,180
Growth to 2035
+21%
much faster than average
Openings a year
14,100
Time to qualify*
2.3 years
* From a bachelor's degree in an unrelated field.
Pay
Information security analyst
Getting in
- Typical entry education
- Bachelor's degree
- On-the-job training
- None
- Prior experience
- Less than 5 years
- Required
- CompTIA Security+ (most entry roles) · CISSP later (needs 5 years' experience)
What the work is like
Dealing with the public
Unpleasant or angry people
Time pressure
Cost of a mistake
Freedom to make decisions
Repeating the same tasks
Time sitting
Time standing
Outdoors in all weather
Information security analyst: 62% usually work over 40 hours a week
Core tasks
- Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
- Monitor current reports of computer viruses to determine when to update virus protection systems.
- Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
- Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
- Modify computer security files to incorporate new software, correct errors, or change individual access status.
- Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
- Document computer security and emergency measures policies, procedures, and tests.
- Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
Also called: Information Security Officer · Information Security Specialist · Information Systems Security Analyst · Information Systems Security Officer (ISSO) · Information Technology Security Analyst (IT Security Analyst) · Network Security Analyst · Security Analyst · Systems Analyst
Outlook and AI
Information security analysts held 192,900 jobs in 2025. BLS projects 233,400 by 2035 (+21%, much faster than average; all jobs: +3.5%).
Demand change, productivity change - share increases as firms increase their IT security staffs and capabilities as a response to increasing threats of cyberattacks aimed at sensitive or financial data, offset slightly by efficiencies gained through increased use of automated and artificial intelligence (AI) technologies to improve security measures.
Compare with
- Information security analyst vs. Software engineer
- Information security analyst vs. Computer occupations, all other
- Information security analyst vs. Network and computer systems administrators
- Information security analyst vs. Computer systems analyst
- Information security analyst vs. Computer network support specialist
- Information security analyst vs. Database administrator
- Information security analyst vs. Computer network architect