### Bureau of Labor Statistics U.S. Bureau of Labor Statistics

Information Security Analysts Summary
                        
            
                                                        
                                                                
                        
            
            
            
                            
                                                
                                                
                                                
                                                
            						
							
				                                                
                                            




            			Information security analystsInformation security analysts work to protect a company’s computer systems.							
						Quick Facts:     Information Security Analysts2023     Median Pay
            						$120,360     per year
										$57.87     per hourTypical Entry-Level Education
                                    Bachelor's degreeWork Experience in a Related Occupation
                                    Less than 5 yearsOn-the-job Training
                                    NoneNumber of Jobs, 2022
                                    168,900Job Outlook, 2022-32
                                    32% (Much faster than average)Employment Change, 2022-32
                                    53,200What Information Security Analysts Do
                                                
                        
                        
Information security analysts plan and carry out security measures to protect an organization’s computer networks and systems.
            
                        Work Environment
                        
Most information security analysts work for computer companies, consulting firms, or business and financial companies.
            
                                                How to Become an Information Security Analyst
                                                
                        
Information security analysts typically need a bachelor’s degree in a computer science field, along with related work experience. Employers may prefer to hire analysts who have professional certification.
            
                        Pay
                        												                            																				    														The median annual wage for information security analysts was $120,360 in May 2023.									                                					
						
            
                        Job Outlook
                        						
												Employment							of information security analysts is projected to grow							 32 percent from 2022 to 2032, much faster than the average for all occupations.
						About 16,800 openings for information security analysts are projected each year, on average, over the decade.
            			
            			 Many of those openings are expected to result from the need to replace workers who transfer to different occupations or exit the labor force, such as to retire.
						State & Area Data
                       Explore resources for employment and wages by state and area for information security analysts.
            
            
						
                        Similar Occupations
                        
                                                    Compare the job duties, education, job growth, and pay of information security analysts with similar occupations.
            
            
                        More Information, Including Links to O*NET
                        
                                               
                        Learn more about information security analysts by visiting additional resources, including O*NET, a source on key characteristics of workers and occupations.
 What Information Security Analysts Do 
            

			information security analysts imageInformation security analysts install software, such as firewalls, to protect computer networks.			
Information security analysts plan and carry out security measures to protect an organization’s computer networks and systems.
Duties
Information security analysts typically do the following:
Monitor their organization’s networks for security breaches and investigate when one occurs
Use and maintain software, such as firewalls and data encryption programs, to protect sensitive information
Check for vulnerabilities in computer and network systems
Research the latest information technology (IT) security trends
Prepare reports that document general metrics, attempted attacks, and security breaches
Develop security standards and best practices for their organization
Recommend security enhancements to management or senior IT staff
Help computer users when they need to install or learn about new security products and proceduresInformation security analysts are heavily involved with creating their organization’s disaster recovery plan, a procedure that IT employees follow in case of emergency. These plans allow for the continued operation of an organization’s IT department. The recovery plan includes preventive measures such as regularly copying and transferring data to an offsite location. It also involves plans to restore proper IT functioning after a disaster. Analysts continually test the steps in their recovery plans.
Information security analysts must stay up to date on IT security and on the latest methods attackers are using to infiltrate computer systems. Analysts need to research new security technology to decide what will most effectively protect their organization.
 Work Environment
			information security analysts imageMany analysts work in IT departments and manage the security of their companies computer networks.			

	    
				
	
	
	
	
	
	
	    					 Information security analysts held about 168,900 jobs in 2022. The largest employers of information security analysts were as follows:
        Computer systems design and related services
                25%Finance and insurance
                16Information
                10Management of companies and enterprises
                9Management, scientific, and technical consulting services
                6Many information security analysts work with other members of an information technology department, such as network administrators or computer systems analysts.
Work Schedules
Most information security analysts work full time, and some work more than 40 hours per week. Information security analysts sometimes have to be on call outside of normal business hours in case of an emergency.
 How to Become an Information Security Analyst

			information security analysts imageThere are a number of information security certifications available, and many employers prefer  candidates to have certification.			
Information security analysts typically need a bachelor’s degree in a computer science field, along with related work experience. Employers may prefer to hire analysts who have professional certification.
Education
Information security analysts typically need a bachelor’s degree in computer and information technology or a related field, such as engineering or math. However, some workers enter the occupation with a high school diploma and relevant industry training and certifications.
Work Experience in a Related Occupation
Information security analysts may need to have work experience in a related occupation. Many analysts have experience in an information technology department, often as a network and computer systems administrator.
Licenses, Certifications, and Registrations
Many employers prefer to hire candidates who have information security certification. Some of these certifications, such as Security+, are for workers at the entry level; others, such as the Certified Information Systems Security Professional (CISSP), are designed for experienced information security workers. Certification in specialized areas, such as systems auditing, also is available.
Advancement
Information security analysts may advance to become chief security officers or another type of computer and information systems manager. Information security analysts also may advance within the occupation as they gain experience. For example, they may lead a team of other information security analysts or become an expert in a particular area of information security.
Important Qualities
***Analytical skills*.** Information security analysts study computer systems and networks and assess risks to determine improvements for security policies and protocols.
***Communication skills*.** Information security analysts must be able to explain information security needs and potential threats to technical and nontechnical audiences within their organizations.
***Creative skills.*** Information security analysts must anticipate information security risks and implement new ways to protect their organizations’ computer systems and networks.
***Detail oriented*.** Because cyberattacks may be difficult to detect, information security analysts must pay careful attention to computer systems and watch for minor changes in performance.
***Problem-solving skills*.** Information security analysts must respond to security alerts and uncover and fix flaws in computer systems and networks.
 Pay

			



	
 
                                                     
            
    
                Information Security AnalystsMedian annual wages, May 2023Information security analysts$120,360  Computer occupations$104,420  Total, all occupations$48,060Note: All Occupations includes all occupations in the U.S. Economy.Source: U.S. Bureau of Labor Statistics, Occupational Employment and Wage Statistics
 

	
	



		
	
	
	
The median annual wage for information security analysts was $120,360 in May 2023. 


The median wage is the wage at which half the workers in an occupation earned more than that amount and half earned less. The lowest 10 percent earned less than $69,210, and the highest 10 percent earned more than $182,370.





		
	    					 In May 2023, the median annual wages for information security analysts in the top industries in which they worked were as follows:	
        Information
                $133,530Finance and insurance
                126,230Management of companies and enterprises
                122,510Computer systems design and related services
                121,980Management, scientific, and technical consulting services
                112,140Most information security analysts work full time, and some work more than 40 hours per week. Information security analysts sometimes have to be on call outside of normal business hours in case of an emergency.
 Job Outlook

   
        
    
          
        
    
                Information Security AnalystsPercent change in employment, projected 2022-32Information security analysts32%  Computer occupations14%  Total, all occupations3%Note: All Occupations includes all occupations in the U.S. Economy.Source: U.S. Bureau of Labor Statistics, Employment Projections program
            
            
			 
	
	
	

			Employment				of information security analysts is projected to grow				 32 percent from 2022 to 2032, much faster than the average for all occupations.
			
			About 16,800 openings for information security analysts are projected each year, on average, over the decade.
			
			 Many of those openings are expected to result from the need to replace workers who transfer to different occupations or exit the labor force, such as to retire.
			Employment
	
			
High demand is expected for information security analysts. Cyberattacks have grown in frequency, and these analysts will be needed to create innovative solutions to prevent hackers from stealing critical information or creating problems for computer networks.
As businesses focus on enhancing cybersecurity, they will need information security analysts to secure new technologies from outside threats or hacks. A shift to remote work and the rise of e-commerce have increased the need for enhanced security, contributing to the projected employment growth of these workers over the decade.
Strong growth in digital health services and telehealth will also increase data security risks for healthcare providers. More of these analysts are likely to be needed to safeguard patients' personal information and data.
			

                        Employment projections data for     information security analysts, 2022-32
                Occupational Title
                        SOC Code
                        Employment, 2022
                        Projected Employment, 2032
                        Change, 2022-32
                        Employment by IndustryPercent
                        NumericSOURCE: U.S. Bureau of Labor Statistics, Employment Projections program**Information security analysts**
			15-1212
			168,900
			222,200
			32
			53,200
			Get data
 State & Area Data **Occupational Employment and Wage Statistics (OEWS)** The Occupational Employment and Wage Statistics (OEWS) program produces employment and wage estimates annually for over 800 occupations. These estimates are available for the nation as a whole, for individual states, and for metropolitan and nonmetropolitan areas. The link(s) below go to OES data maps for employment and wages by state and area. Information security analysts **Projections Central** Occupational employment projections are developed for all states by Labor Market Information (LMI) or individual state Employment Projections offices. All state projections data are available at www.projectionscentral.com. Information on this site allows projected employment growth for an occupation to be compared among states or to be compared within one state. In addition, states may produce projections for areas; there are links to each state’s websites where these data may be retrieved. **CareerOneStop** CareerOneStop includes hundreds of occupational profiles with data available by state and metro area. There are links in the left-hand side menu to compare occupational employment by state and occupational wages by local area or metro area. There is also a salary info tool to search for wages by zip code.
 Similar Occupations This table shows a list of occupations with job duties that are similar to those of information security analysts. Occupation
                Job Duties
                ENTRY-LEVEL EDUCATION
                2023     MEDIAN PAY**Computer and Information Research Scientists**
            Computer and information research scientists design innovative uses for new and existing computing technology.
            Master's degree
            $145,080**Computer and Information Systems Managers**
            Computer and information systems managers plan, coordinate, and direct computer-related activities in an organization.
            Bachelor's degree
            $169,510**Computer Network Architects**
            Computer network architects design and implement data communication networks, including local area networks (LANs), wide area networks (WANs), and intranets.
            Bachelor's degree
            $129,840**Computer Programmers**
            Computer programmers write, modify, and test code and scripts that allow computer software and applications to function properly.
            Bachelor's degree
            $99,700**Computer Support Specialists**
            Computer support specialists maintain computer networks and provide technical help to computer users.
            See How to Become One
            $60,810**Computer Systems Analysts**
            Computer systems analysts study an organization’s current computer systems and design ways to improve efficiency.
            Bachelor's degree
            $103,800**Database Administrators and Architects**
            Database administrators and architects create or organize systems to store and secure data.
            Bachelor's degree
            $117,450**Network and Computer Systems Administrators**
            Network and computer systems administrators install, configure, and maintain organizations’ computer networks and systems.
            Bachelor's degree
            $95,360**Software Developers, Quality Assurance Analysts, and Testers**
            Software developers design computer applications or programs. Software quality assurance analysts and testers identify problems with applications or programs and report defects.
            Bachelor's degree
            $130,160**Web Developers and Digital Designers**
            Web developers create and maintain websites. Digital designers develop, create, and test website or interface layout, functions, and navigation for usability.
            Bachelor's degree
            $92,750
 Contacts for More Information
								
For more information about computer careers, visit
Association for Computing Machinery
Computing Research Association
IEEE Computer Society
For information about opportunities for women pursuing information technology careers, visit:
National Center for Women & Information Technology

                                                
                                                        
                                                                                                    O*NET
                                        Information Security Analysts
 Suggested citation: Bureau of Labor Statistics, U.S.  Department of Labor, Occupational Outlook Handbook, Information Security Analysts, 
        	 at https://www.bls.gov/ooh/computer-and-information-technology/information-security-analysts.htm (visited *May 21, 2024*).
 **Last Modified Date:**
                        Wednesday, April 17, 2024


**U.S. Bureau of Labor Statistics**
Office of Occupational Statistics and Employment Projections 
PSB Suite 2135 
2 Massachusetts Avenue NE  
Washington, DC 20212-0001 Telephone:1-202-691-5700 

www.bls.gov/ooh
Contact OOH