Information Security Analyst

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.

O*NET reports this occupation under titles such as: Information Security Officer; Information Security Specialist; Information Systems Security Analyst; Information Systems Security Officer (ISSO); Information Technology Security Analyst (IT Security Analyst); Network Security Analyst; Security Analyst; Systems Analyst

Tasks

• Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
• Monitor current reports of computer viruses to determine when to update virus protection systems.
• Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
• Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
• Modify computer security files to incorporate new software, correct errors, or change individual access status.
• Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
• Document computer security and emergency measures policies, procedures, and tests.
• Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
• Monitor use of data files and regulate access to safeguard information in computer files.
• Coordinate implementation of computer system plan with establishment personnel and outside vendors.
• Train users and promote security awareness to ensure system security and to improve server and network efficiency.

Knowledge

• Computers and Electronics
• English Language
• Administration and Management
• Engineering and Technology
• Telecommunications
• Customer and Personal Service
• Public Safety and Security
• Education and Training

Skills

• Reading Comprehension
• Critical Thinking
• Active Listening
• Speaking
• Writing
• Monitoring
• Active Learning

Abilities

• Oral Comprehension
• Written Comprehension
• Problem Sensitivity
• Deductive Reasoning
• Inductive Reasoning
• Written Expression
• Information Ordering
• Oral Expression
• Near Vision
• Category Flexibility
• Flexibility of Closure
• Speech Recognition
• Speech Clarity
• Selective Attention
• Fluency of Ideas
• Originality
• Perceptual Speed