Top Skills for This Career
BLS identifies these as the three highest-rated skills for this detailed occupation. TrustInEd adds the plain-language explanations so visitors understand what each skill means.
Using computers, software, digital systems, and technology to complete work and solve problems.
Adjusting effectively when priorities, conditions, tools, or expectations change.
Understanding written information and communicating ideas clearly in writing.
How Do You Prepare for This Career?
BLS describes the typical preparation for this occupation. Requirements can vary by employer, state, licensing rules and individual circumstances.
How to Become One
How to Become an Information Security Analyst There are a number of information security certifications available, and many employers prefer candidates to have certification. Information security analysts typically need a bachelor’s degree in a computer science field, along with related work experience. Employers may prefer to hire analysts who have professional certification.
Education
Information security analysts typically need a bachelor’s degree in computer and information technology or a related field, such as engineering or math. However, some workers enter the occupation with a high school diploma and relevant industry
Training
and certifications. Work Experience in a Related Occupation Information security analysts may need to have work experience in a related occupation. Many analysts have experience in an information technology department, often as a network and computer systems administrator.
Licenses, Certifications & Registrations
Many employers prefer to hire candidates who have information security certification. Some of these certifications are for workers at the entry level; others, are designed for experienced information security workers. Certification in specialized areas, such as systems auditing, also is available. Information on certifications is available from CareerOneStop. Advancement Information security analysts may advance to become chief security officers or another type of computer and information systems manager. Information security analysts also may advance within the occupation as they gain experience. For example, they may lead a team of other information security analysts or become an expert in a particular area of information security.
Your Next Step
Compare colleges and education options that can support the typical entry-level education for this career.
Pay
the median annual wage for all workers was $50,980.
Job Outlook
Job Outlook Employment of information security analysts is projected to grow 21 percent from 2025 to 2035, much faster than the average for all occupations. About 14,100 openings for information security analysts are projected each year, on average, over the decade. Many of those openings are expected to result from the need to replace workers who transfer to different occupations or exit the labor force, such as to retire. Employment High demand is expected for information security analysts. Cyberattacks have grown in frequency, and these analysts will be needed to create innovative solutions to prevent hackers from stealing critical information or creating problems for computer networks. As businesses focus on enhancing cybersecurity, they will need information security analysts to secure new technologies from outside threats or hacks. Increased use of artificial intelligence (AI) and the rise of e-commerce have increased the need for enhanced security, contributing to the projected employment growth of these workers over the decade. Information Security Analysts Percent change in employment, projected 2025–35 Information security analysts 21% Computer occupations 6% Total, all occupations 3% Note: All Occupations includes all occupations in the U.S. Economy.
What They Do
What Information Security Analysts Do
Information security analysts plan and carry out security measures to protect an organization’s computer networks and systems.
Duties
Information security analysts typically do the following:
- Monitor their organization’s networks for security breaches and investigate when one occurs
- Use and maintain software, such as firewalls and data encryption programs, to protect sensitive information
- Check for vulnerabilities in computer and network systems
- Research the latest information technology (IT) security trends
- Prepare reports that document general metrics, attempted attacks, and security breaches
- Develop security standards and best practices for their organization
- Recommend security enhancements to management or senior IT staff
- Help computer users when they need to install or learn about new security products and procedures
Information security analysts are heavily involved with creating their organization’s disaster recovery plan, a procedure that IT employees follow in case of emergency. These plans allow for the continued operation of an organization’s IT department. The recovery plan includes preventive measures such as regularly copying and transferring data to an offsite location. It also involves plans to restore proper IT functioning after a disaster. Analysts continually test the steps in their recovery plans.
Information security analysts must stay up to date on IT security and on the latest methods attackers are using to infiltrate computer systems. Analysts need to research new security technology to decide what will most effectively protect their organization.
Work Environment
Work Environment
Information security analysts held about 192,900 jobs in 2025. The largest employers of information security analysts were as follows:
| Computer systems design and related services | 22% |
| Finance and insurance | 17 |
| Management of companies and enterprises | 9 |
| Information | 9 |
| Management, scientific, and technical consulting services | 6 |
Many information security analysts work with other members of an information technology department, such as network administrators or computer systems analysts.
Work Schedules
Most information security analysts work full time, and some work more than 40 hours per week. Information security analysts sometimes have to be on call outside of normal business hours in case of an emergency.
Important Qualities
The following are examples of qualities that are important for these workers to perform their duties. For more information, visit the Employment Projections (EP) skills data page. Analytical skills. Information security analysts study computer systems and networks and assess risks to determine improvements for security policies and protocols. Communication skills. Information security analysts must be able to explain information security needs and potential threats to technical and nontechnical audiences within their organizations. Creative skills. Information security analysts must anticipate information security risks and implement new ways to protect their organizations’ computer systems and networks. Detail oriented. Because cyberattacks may be difficult to detect, information security analysts must pay careful attention to computer systems and watch for minor changes in performance. Problem-solving skills. Information security analysts must respond to security alerts and uncover and fix flaws in computer systems and networks.
More Information
More Information, Including Links to O*NET
Learn more about information security analysts by visiting additional resources, including O*NET, a source on key characteristics of workers and occupations.
Take the Next Step
Find Education Programs
Compare colleges and education options that can support the typical entry-level education for this career.
Explore pathway →Hear From ED
Use the guided career counseling experience to connect this career to your goals, skills and education preferences.
Start with ED →Career data and occupational profile text are sourced from the U.S. Bureau of Labor Statistics Occupational Outlook Handbook and Employment Projections program. Education requirements are typical entry-level requirements and may vary by employer, state, occupation or individual circumstance. View the official BLS profile.