Information Security Analyst Job Description, Key Duties and Responsibilities

Information Security Analyst Job Description, Key Duties and Responsibilities

If you are looking for information on the job description of an information security analyst, then this post will be helpful to you; it shows you key duties, tasks, and responsibilities that individuals who work in that role perform.

You will also discover the major requirements commonly set by employers/recruiters/HR managers for prospective candidates to meet when hiring for the position of information security analyst in most organizations. Read on:

What Does an Information Security Analyst Do?

Information security analysts are professionals responsible for planning and executing security measures to protect an organization’s computer networks and systems.

They work with IT service providers, banking and financial services, government agencies, healthcare companies, etc.

Their job description entails developing and publishing Information security procedures and guidelines based on knowledge of best practices and compliance requirements; as well as overseeing the preparation and execution of required information security policies, procedures, standards, and guidelines.

Information security analysts work with information owners (Business and IT) to conduct security design and implementation-level reviews, as well as risk analysis/assessments and control selection activities to ensure appropriate policies and standards are applied to projects consistent with the company’s risk appetite and regulatory/legal requirements for various Business and Information Technology systems and processes.

They utilize technical skills, industry and security knowledge, and work with relevant Security Services teams to prepare relevant information and present residual risks to IT Risk Council.

They are responsible for the preparation, maintenance, and update of security processes, procedures, and standards, including Information Security Governance engagement model and design templates, company notifications and alerts in support of the Information Security, Risk, and Controls department.

The information security analyst work description also involves undertaking scheduled information risk and security functions on various systems and applications in accordance with established standards and procedures on a regular basis.

To become an information security analyst requires a post secondary education and certification from accredited professional bodies such as CISA and CISM.

It also requires that interested individuals possess analytical and problem solving skills, as well as troubleshooting, communication, and interpersonal skills.

Information Security job Description Example/Sample/Template

The information security analyst performs various functions in protecting an organization’s computer networks and systems.

The major tasks, duties, and responsibilities that commonly form the information security analyst job description are listed below:

• Responsible for defining access privileges, control structures, and resources to protect systems
• Operate software to protect systems and information infrastructure, including firewalls and data encryption programs; and install security measures
• Handle cyber-threats by applying reactive and proactive measures
• Undertake research, simulate and run penetration tests using publicly available and proprietary tools
• Provide leadership for security projects along with other security and R&D groups
• Responsible for developing and maintaining lab environments to evaluate new security threats
• Continuously undertake research on new attack vectors and techniques
• Participate in product security reviews with R&D and product management teams
• Identify abnormalities, recognize problems, and report violations
• Assess current situation, evaluating trends and anticipating requirements to implement security improvements and processes
• Provide support for executive reporting through analysis of information security trends, metrics, and statistics
• Provide support for user access administration processes and user entitlement reviews
• Conduct periodic audits to determine security violations and inefficiencies
• Implement and maintain security controls to upgrade systems
• Prepare performance reports and communicate system status to keep users informed
• Implement and oversee security training awareness program within the organization
• Maintain industry compliance certifications for the organization
• Review Third Party information and Vendor software/hardware security controls/risks and document gaps and issues for action
• Support customer security reviews for new and existing customers
• Conduct security research in keeping abreast of latest security issues and Maintain technical knowledge by attending educational workshops; reviewing publications.

Information Security Analyst Requirements – Skills, Knowledge, and Abilities for Career Success

When hiring for the information security analyst position, employers or recruiters would want to be sure that candidates for the role will be able to realize the purpose, obligations, and objectives of the job.

They would therefore expect applicants to meet certain requirements to be able to access the job.

Shown below are typical requirements most employers set to find the right candidates for the information security analyst role in their organizations:

• Education: To work as an information security analyst requires a post secondary education, preferably a Bachelor’s degree in Business, Information Technology, or Cyber Security, or in other technology related discipline
• Certification: It is also a plus to be certified or working towards certification from accredited bodies, including Certified Information Systems Security Professional (CISSP), Certified Information Security Auditor (CISA), or Certified Information Security Management (CISM)
• Experience: Depending on the needs of the recruiter, they may require 2-5+ years of experience in security analysis or related field; with experience in leading security analysis project/team independently for the full project lifecycle; scripting/coding experience (Python, Perl, Ruby, Bash, PowerShell, .NET, HTML5, PHP, etc.) for developing, extending, or modifying exploits, shellcode or exploit tools; and hands-on experience in static and dynamic malware analysis
• Knowledge: Information security analysts are required to have strong understanding of security principles, policies, and industry best practices. They must also possess networking knowledge – an understanding of networking essentials, data flows, architecture, ports, and protocols, wireless, etc.
• It is also important that they possess general operating system knowledge – a solid understanding and practical experience in various flavors of Windows and Linux, OS configuration, file system structures, OS components, mobile operating systems, etc.
• It is also vital that they possess knowledge of TCP/IP, computer networking, routing and switching; cloud computing, including AWS and Azure security and best practices to protect cloud infrastructure; and Penetration testing of cloud and on-premise applications and infrastructure
• Communication skills: Information security analysts require great oral and written communication skills for technical writing, including assessment reports, presentations, and operating procedures
• Interpersonal skills: They require interpersonal skills to work collaboratively and effectively with others
• Troubleshooting skills: They require the ability or skill to recognize the cause of a problem and get to a root cause, as well as conduct forensic investigation and analysis of how and why a crack or some other compromise occurred
• Problem-solving and analytical skills: It is essential that information security analysts are natural problem solvers committed to utilizing their technical and collaborative skills in deriving solutions to identified problems
• Organizational skills: they require this skill to effectively prioritize tasks and work simultaneously on several projects.

Conclusion

This post is useful to recruiters and HR managers needing to make a description for the information security analyst position in their firms.

They can apply the sample job description provided in this post in creating the perfect description that will enable them to attract the best information security analysts.

This post is also helpful to people who are looking to start a career as an information security analyst.

They will be able to learn all they need to about the duties and responsibilities of an information security analyst to help them better prepare for the role.

Did this article increase your knowledge of what information security analysts do? Please, leave a comment in the box below. You may also discuss your job description if you work as an information security analyst.