# data[].attributes.headline
Different ways of becoming An Information Security Analyst

# data[].attributes.subject
Different ways of becoming An Information Security Analyst

# data[].attributes.headline
To become an information security analyst, you will need a bachelor's or master's degree in computer science or a related field like engineering or math.

# data[].attributes.subject
To become an information security analyst, you will need a bachelor's or master's degree in computer science or a related field like engineering or math.

# data[].attributes.body
Information security analysts typically need a bachelor’s degree in computer and information technology or a related field, such as engineering or math. However, some workers enter the occupation with a high school diploma and relevant industry training and certifications.

# data[].attributes.attachment_link.readable_text
Summary

Video transcript available at https://www.youtube.com/watch?v=cVZktAEtWE4.

Quick Facts: Information Security Analysts
2021 Median Pay

$102,600 per year
$49.33 per hour

Information security analysts plan and carry out security measures to protect an organization's computer networks and systems.

Most information security analysts work for computer companies, consulting firms, or business and financial companies.

Information security analysts typically need a bachelor's degree in a computer science field, along with related work experience. Employers may prefer to hire analysts who have professional certification.

The median annual wage for information security analysts was $102,600 in May 2021.

Employment of information security analysts is projected to grow 35 percent from 2021 to 2031, much faster than the average for all occupations.

About 19,500 openings for information security analysts are projected each year, on average, over the decade. Many of those openings are expected to result from the need to replace workers who transfer to different occupations or exit the labor force, such as to retire.

Explore resources for employment and wages by state and area for information security analysts.

Compare the job duties, education, job growth, and pay of information security analysts with similar occupations.

Learn more about information security analysts by visiting additional resources, including O*NET, a source on key characteristics of workers and occupations.

What Information Security Analysts Do About this section

Information security analysts plan and carry out security measures to protect an organization's computer networks and systems.

Duties

Information security analysts typically do the following:

Monitor their organization's networks for security breaches and investigate when one occurs

Use and maintain software, such as firewalls and data encryption programs, to protect sensitive information

Check for vulnerabilities in computer and network systems

Research the latest information technology (IT) security trends

Prepare reports that document general metrics, attempted attacks, and security breaches

Develop security standards and best practices for their organization

Recommend security enhancements to management or senior IT staff

Help computer users when they need to install or learn about new security products and procedures

Information security analysts are heavily involved with creating their organization's disaster recovery plan, a procedure that IT employees follow in case of emergency. These plans allow for the continued operation of an organization's IT department. The recovery plan includes preventive measures such as regularly copying and transferring data to an offsite location. It also involves plans to restore proper IT functioning after a disaster. Analysts continually test the steps in their recovery plans.

Information security analysts must stay up to date on IT security and on the latest methods attackers are using to infiltrate computer systems. Analysts need to research new security technology to decide what will most effectively protect their organization.

Information security analysts held about 163,000 jobs in 2021. The largest employers of information security analysts were as follows:

Computer systems design and related services

27%

Finance and insurance

15

Information

14

Management of companies and enterprises

8

Administrative and support services

5

Many information security analysts work with other members of an information technology department, such as network administrators or computer systems analysts.

Work Schedules

Most information security analysts work full time, and some work more than 40 hours per week. Information security analysts sometimes have to be on call outside of normal business hours in case of an emergency.

How to Become an Information Security Analyst About this section

Information security analysts typically need a bachelor's degree in a computer science field, along with related work experience. Employers may prefer to hire analysts who have professional certification.

Education

Information security analysts typically need a bachelor's degree in computer and information technology or a related field, such as engineering or math. However, some workers enter the occupation with a high school diploma and relevant industry training and certifications.

Work Experience in a Related Occupation

Information security analysts may need to have work experience in a related occupation. Many analysts have experience in an information technology department, often as a network and computer systems administrator.

Licenses, Certifications, and Registrations

Many employers prefer to hire candidates who have information security certification. Some of these certifications, such as Security+, are for workers at the entry level; others, such as the Certified Information Systems Security Professional (CISSP), are designed for experienced information security workers. Certification in specialized areas, such as systems auditing, also is available.

Advancement

Information security analysts may advance to become chief security officers or another type of computer and information systems manager. Information security analysts also may advance within the occupation as they gain experience. For example, they may lead a team of other information security analysts or become an expert in a particular area of information security.

Important Qualities

Analytical skills. Information security analysts study computer systems and networks and assess risks to determine improvements for security policies and protocols.

Communication skills. Information security analysts must be able to explain information security needs and potential threats to technical and nontechnical audiences within their organizations.

Creative skills. Information security analysts must anticipate information security risks and implement new ways to protect their organizations' computer systems and networks.

Detail oriented. Because cyberattacks may be difficult to detect, information security analysts must pay careful attention to computer systems and watch for minor changes in performance.

Problem-solving skills. Information security analysts must respond to security alerts and uncover and fix flaws in computer systems and networks.

Median annual wages, May 2021

The median annual wage for information security analysts was $102,600 in May 2021. The median wage is the wage at which half the workers in an occupation earned more than that amount and half earned less. The lowest 10 percent earned less than $61,520, and the highest 10 percent earned more than $165,920.

In May 2021, the median annual wages for information security analysts in the top industries in which they worked were as follows:

Information

$128,970

Finance and insurance

104,790

Management of companies and enterprises

101,350

Computer systems design and related services

101,170

Administrative and support services

95,270

Most information security analysts work full time, and some work more than 40 hours per week. Information security analysts sometimes have to be on call outside of normal business hours in case of an emergency.

Employment of information security analysts is projected to grow 35 percent from 2021 to 2031, much faster than the average for all occupations.

About 19,500 openings for information security analysts are projected each year, on average, over the decade. Many of those openings are expected to result from the need to replace workers who transfer to different occupations or exit the labor force, such as to retire.

Employment

High demand is expected for information security analysts. Cyberattacks have grown in frequency, and these analysts will be needed to create innovative solutions to prevent hackers from stealing critical information or creating problems for computer networks.

As businesses focus on enhancing cybersecurity, they will need information security analysts to secure new technologies from outside threats or hacks. A shift to remote work and the rise of e-commerce have increased the need for enhanced security, contributing to the projected employment growth of these workers over the decade.

Strong growth in digital health services and telehealth will also increase data security risks for healthcare providers. More of these analysts are likely to be needed to safeguard patients' personal information and data.

Occupational Title

SOC Code

Employment, 2021

Projected Employment, 2031

Change, 2021-31

Employment by Industry

Percent

Numeric

Information security analysts

15-1212

163,000

219,500

35

56,500
Get data

Occupational Employment and Wage Statistics (OEWS)

The Occupational Employment and Wage Statistics (OEWS) program produces employment and wage estimates annually for over 800 occupations. These estimates are available for the nation as a whole, for individual states, and for metropolitan and nonmetropolitan areas. The link(s) below go to OEWS data maps for employment and wages by state and area.

Projections Central

Occupational employment projections are developed for all states by Labor Market Information (LMI) or individual state Employment Projections offices. All state projections data are available at www.projectionscentral.org. Information on this site allows projected employment growth for an occupation to be compared among states or to be compared within one state. In addition, states may produce projections for areas; there are links to each state's websites where these data may be retrieved.

CareerOneStop

CareerOneStop includes hundreds of occupational profiles with data available by state and metro area. There are links in the left-hand side menu to compare occupational employment by state and occupational wages by local area or metro area. There is also a salary info tool to search for wages by zip code.

For more information about computer careers, visit
Association for Computing Machinery Computing Research Association IEEE Computer Society
For information about opportunities for women pursuing information technology careers, visit:
National Center for Women & Information Technology
O*NET
Information Security Analysts

# data[].attributes.attachment_link.description
Information security analysts plan and carry out security measures to protect an organization's computer networks and systems.

# data[].attributes.headline
Some people take the other way of getting into the career and get certifications with just a high school diploma 

# data[].attributes.subject
Some people take the other way of getting into the career and get certifications with just a high school diploma 

# data[].attributes.body
An information security analyst career can benefit from professional certifications, which demonstrate advanced professional knowledge and skills. Although no certifications are required at state or national levels for this career, many employers prefer information security analysts with a professional certification.

# data[].attributes.attachment_link.readable_text
Ever wondered what a day in the life of a cyber security analyst is like? Now is an excellent time to enter the growing and lucrative cybersecurity field. Information security analysts can expect high salaries and strong growth over the next decade.

This page explains how to become an information security analyst. We cover the education, experience, and certifications that prepare people for this field. We also describe what to expect from potential information security analyst careers.

What Is an Information Security Analyst?

Information security analysts ensure security measures that keep organizations' computer networks and systems safe. Security analysts conduct penetration testing, investigate security breaches, and install software to protect valuable data.

An information security analyst's career focuses on cybersecurity, a subfield of computer science. Cybersecurity professionals need an advanced understanding of networks and computers to prevent and respond to cyberattacks.

Security analysts conduct penetration testing, investigate security breaches, and install software to protect valuable data.

Information security analysts often work with their organizations' information technology departments. Security analysts typically collaborate with computer systems analysts and network administrators to help other employees understand security products and procedures. These professionals find work in industries such as computer systems design, finance and insurance, and information organizations.

What Education Do Information Security Analysts Need?

Information security analysts typically need at least a bachelor's degree in a field like cybersecurity, computer science, or IT. Some security analysts earn degrees in disciplines like engineering or math. Most bachelor's degrees take four full-time years to complete.

Some employers prefer applicants with a master's in information systems or a related field. A master's degree usually takes two full-time years to complete.

Individuals with a master's degree in information security earn more on average than those with only a bachelor's. January 2022 Payscale data shows the average annual salary for bachelor's in information science graduates is $77,000. The average salary for professionals with a master's in information science is $96,000 per year.

Cybersecurity bootcamps provide intensive, career-relevant training in a short period of time. Some people earn one or more college degrees and complete a cybersecurity bootcamp to develop practical, in-demand skills.

MATCH ME TO A BOOTCAMP

How Much Experience Do Information Security Analysts Need?

In addition to a bachelor's degree, most employers require information security analysts to hold previous information technology or computer-related experience. This requirement varies by employer and position. Many security analysts start their careers as computer or network system administrators, database administrators, or computer systems analysts.

Some employers let information security analysts substitute education for experience. Other workplaces may hire applicants without a bachelor's degree, letting them substitute experience for the education requirement.

Certifications

An information security analyst career can benefit from professional certifications, which demonstrate advanced professional knowledge and skills. Although no certifications are required at state or national levels for this career, many employers prefer information security analysts with a professional certification.

Below, we describe some potential certifications for information security analysts.

Certified Information Systems Security Professional: The CISSP certification is a general information security certificate for experienced professionals. Applicants must have at least five years of paid experience, pass an exam, and agree to a code of ethics.

Systems Security Certified Practitioner: Earning the SSCP certification demonstrates advanced knowledge and technical skills in IT infrastructure security best practices. Applicants must have at least one year of paid experience, pass an exam, and agree to a code of ethics.

CompTIA Cybersecurity Analyst: Created for intermediate cybersecurity professionals, the CySA+ certification requires passing an exam with multiple-choice, hands-on, and performance-based questions. CySA+ certified professionals must renew their credential every three years by completing 60 continuing education units.

How Do I Become an Information Security Analyst?

You can launch an information security analyst career through several pathways. The most direct route to becoming an information security analyst is to earn a four-year bachelor's degree in a computer science-related field. Some security analysts also earn a master's degree to increase their earning potential and career opportunities.

Some people learn information security skills and knowledge by completing an intensive bootcamp instead of a traditional higher education degree.

Most security analyst jobs require some professional IT experience. Some employers allow applicants to substitute education for experience, or vice versa. Although not required, completing professional certifications can open the door to better opportunities by keeping security analysts' skills up to date.

Steps to Becoming an Information Security Analyst

Bachelor's Degree Path

1. Earn a bachelor's degree. Most information security analyst jobs require at least a bachelor's degree. Potential majors include information security, cybersecurity, information technology, and computer science.

2. Get professional experience. Most security analyst jobs require some relevant experience in an IT or computers job. Some bachelor's programs offer internships that let students gain professional experience while still in school. Many graduates start their information security analyst career in entry-level IT roles.

3. Obtain professional certifications. Although the field does not require a blanket certification for security analysts, becoming certified can open the door to more opportunities. Employers often prefer job applicants who hold security certifications, which demonstrate proficiency in technical skills and knowledge.

4. Complete continuing education. Enrolling in professional development training and continuing education courses helps security analysts stay current on best practices in the field. You may need to complete continuing education to maintain or renew your professional certifications.

Bootcamp Path

1. Complete a cybersecurity bootcamp.

Cybersecurity bootcamps provide practical, hands-on training in information security skills and knowledge. They can prepare students for entry-level information security jobs in less time and for less money than the typical four-year bachelor's program. Many people who complete a cybersecurity bootcamp already hold an associate or bachelor's degree in an unrelated field.
2. Get professional experience.

3. Obtain professional certifications.

4. Complete continuing education.

Top Online Programs

Explore programs of your interests with the high-quality standards and flexibility you need to take your career to the next level.

Should I Become an Information Security Analyst?

What are some high and low points for this career? What challenges might information security analysts face?
Anyone who becomes an information security analyst will experience an exciting and dynamic position that can shift daily as trends in cybersecurity do. The career remains fresh as you'll see new things daily and you'll know you're helping organizations stay secure. It can be challenging at times with the demands on time. Threat actors never sleep and you may work late nights, weekends, or holidays if there is an incident to respond to.
What type of person does well in this role?
A person with analytical skills. Someone who can detect anomalies in data and have the drive to hunt down why they're there. It may be something legitimate happening, or potentially something malicious. Also a person who can be flexible with their time.
Who does this role help? How does this role impact others?
This role helps organizations understand threats they may face and detect intrusion within their organization. The intelligence found will support the general cybersecurity community along with clients and their own organization.
Why do we need more information security analysts?
Cybersecurity attacks are still increasing and technology will always have vulnerabilities. It takes dedicated security analysts to help protect clients and organizations worldwide.
What next-level roles can information security analysts take on?
Security Analysts can specialize in roles that may assist with incident response, threat intelligence, or move into management roles with those teams.

The Job Hunt

To find the first job of your information security analyst career, look at job fairs, annual conferences, professional group networking events, and online job boards. Ask mentors, former work or internship supervisors, and professors for recommendations and leads on security analyst openings.

Most universities have career development centers where students and recent graduates can get help finding a job. Common services include resume-writing help, mock interviews, and professional development training and workshops.

Consult the popular online job boards below for information security analyst postings.
This job board includes listings for cybersecurity, cryptography, penetration testing, and vulnerability analysis openings. Job-seekers can set up free email alerts to notify them about new postings that match their criteria. Cybersecurity and general tech professionals can find job postings, trending skills, and projected salaries on this site. Dice receives more than 1,000 new job listings a day. This site includes cybersecurity, technology risk, and IT governance job posting and career resources. Jobseekers can upload their resumes and receive email alerts for new listings. One of the most-visited websites for cybersecurity jobs, this site posts listings for openings in the U.S. and abroad. One of the biggest job boards in the world, Indeed lets users search for jobs and post their resumes for free. The site boasts 250 million unique monthly visitors.

Questions About Information Security Analysts

What skills do you need to be an information security analyst?

Information security analysts need excellent analytical, teamwork, and problem-solving skills. They also need tech knowledge in security, networking, and incident response and reporting.

How do I become a security analyst?

Security analysts typically earn a bachelor's degree and gain professional experience to qualify for entry-level jobs. Completing a cybersecurity bootcamp is another route into the field. Completing optional professional certifications can also lead to more security analyst positions.

Do you need a degree to be a cybersecurity analyst?

Most security analyst positions require at least a four-year bachelor's degree in information technology and computers or a related field. Some employers let workers substitute experience for education requirements. Completing a cybersecurity bootcamp may qualify graduates for more advanced positions.

Are cybersecurity jobs boring?

Information security analyst careers require skills that evolve alongside new cyberthreats and emerging technologies. Like any career, some aspects of cybersecurity jobs can be repetitive or boring, like documenting information or going to meetings.

Reviewed by:

# data[].attributes.attachment_link.title
How to Become an Information Security Analyst | ComputerScience.org

# data[].attributes.attachment_link.description
Want to know how to become an information security analyst? This step-by-step guide explores required education, certifications, and job hunt resources.

# data[].attributes.headline
Below are some potential certifications for information security analysts

# data[].attributes.subject
Below are some potential certifications for information security analysts

# data[].attributes.body
Certified Information Systems Security Professional: The CISSP certification is a general information security certificate for experienced professionals. Applicants must have at least five years of paid experience, pass an exam, and agree to a code of ethics.

Systems Security Certified Practitioner: Earning the SSCP certification demonstrates advanced knowledge and technical skills in IT infrastructure security best practices. Applicants must have at least one year of paid experience, pass an exam, and agree to a code of ethics.

CompTIA Cybersecurity Analyst: Created for intermediate cybersecurity professionals, the CySA+ certification requires passing an exam with multiple-choice, hands-on, and performance-based questions. CySA+ certified professionals must renew their credential every three years by completing 60 continuing education units.