Information Security Analysts

Certification or Licensing

(ISC)² offers several certification designations to applicants who pass an examination and meet other requirements. Some of its designations include associate of (ISC)² (an entry-level credential), certified information systems security professional, systems security certified practitioner, certified cloud security professional, certified authorization professional, certified secure software lifecycle professional,and healthcare information security and privacy practitioner. SANS Institute, CompTIA, and vendors of Internet security software and other products also provide certification programs.

Although demand is growing rapidly for information security analysts, there is strong competition for jobs at Fortune 500 companies and government cybersecurity agencies. A growing number of employers are seeking analysts who are certified. Certification from a reputable provider tells employers that the applicant has met the highest standards established by his or her industry. At many employers, certified analysts earn higher salaries and are more likely to be promoted than analysts who are not certified. 

North American–based information security professionals who were members of (ISC)² who were certified earned higher average annual salaries than those who were not certified, according to the 2019 (ISC)² Global Information Security Workforce Study. Those who are certified have more industry knowledge and better opportunities for promotion than those who are not. 

Other Requirements

Some employers—especially government agencies and the financial industry—may require job applicants to undergo background checks.