Information Security Analysts

Information security analysts plan and carry out security measures to protect an organization’s computer networks and systems.

Duties

Information security analysts typically do the following:

• Monitor their organization’s networks for security breaches and investigate when one occurs
• Use and maintain software, such as firewalls and data encryption programs, to protect sensitive information
• Check for vulnerabilities in computer and network systems
• Research the latest information technology (IT) security trends
• Prepare reports that document general metrics, attempted attacks, and security breaches
• Develop security standards and best practices for their organization
• Recommend security enhancements to management or senior IT staff
• Help computer users when they need to install or learn about new security products and procedures

Information security analysts are heavily involved with creating their organization’s disaster recovery plan, a procedure that IT employees follow in case of emergency. These plans allow for the continued operation of an organization’s IT department. The recovery plan includes preventive measures such as regularly copying and transferring data to an offsite location. It also involves plans to restore proper IT functioning after a disaster. Analysts continually test the steps in their recovery plans.

Information security analysts must stay up to date on IT security and on the latest methods attackers are using to infiltrate computer systems. Analysts need to research new security technology to decide what will most effectively protect their organization.

Information security analysts held about 182,800 jobs in 2024. The largest employers of information security analysts were as follows:

Many information security analysts work with other members of an information technology department, such as network administrators or computer systems analysts.

Work Schedules

Most information security analysts work full time, and some work more than 40 hours per week. Information security analysts sometimes have to be on call outside of normal business hours in case of an emergency.

Information security analysts typically need a bachelor’s degree in a computer science field, along with related work experience. Employers may prefer to hire analysts who have professional certification.

The median annual wage for information security analysts was $124,910 in May 2024.

Employment of information security analysts is projected to grow 29 percent from 2024 to 2034, much faster than the average for all occupations.

About 16,000 openings for information security analysts are projected each year, on average, over the decade. Many of those openings are expected to result from the need to replace workers who transfer to different occupations or exit the labor force, such as to retire.