5 answers
James
Student
Canton, Georgia
6
Questions
Asked
1201 views
Why did you want to be a Information Security Analyst
Trying to get more information about this topic.
Login to comment
5 answers
Wayne Archibald
Cybersecurity Associate Director here to share knowledge!
229
Answers
Annapolis Junction, Maryland
Updated
Wayne’s Answer
Hi James. I got into Information Security because I was a developer for 6 years and I wanted to try something new and information security sounded interesting. I loved the fact that I was learning about the concept of cybersecurity and protecting data.
Good luck!
Good luck!
brian b
Security Technology Specialist
15
Answers
Chandler, AZ
Updated
brian’s Answer
I am not an InfoSec Analyst, but I have been in the computer security industry for a very long time. My roles have been within the vendor community, providing software and services to individuals & organizations, including the role of InfoSec Analyst. This role has continued to pay well and provide a career path to other OpSec roles within large organizations, and service providers alike. This role should also offer the option of competitive pay, flexible hours, and lots of great learning opportunities. I would recommend focusing on InfoSec Analyst roles with companies that are providing managed security services (e.g. Managed XDR). Some of those companies are; Blue Voyant, Crowdstrike, Accenture and Microsoft.
search the job boards of the aforementioned companies
brian recommends the following next steps:
Michael McNally
IT Audit Manager
1
Answer
New Haven, Connecticut
Updated
Michael’s Answer
Hey James - While I am not an Information Systems Analyst directly, I do work with Information Systems teams to guide them down a path of ensuring proper security measures are in place for their team and, more broadly, entire departments within their companies. If you are unfamiliar with IT Audit, it's worth a look. On a high level, IT auditors evaluate security measures in place within a given company and offer guidance on how to strengthen those measures to ensure certain security standards are met. If you were to work in Internal audit, you'd be working within a single company as part of their audit department (for example, Apple, etc). On the flipside, if you worked in External IT audit, you'd likely have a large number of companies you work with (your "clients") which offers many great learning opportunities. The external audit profession gives you exposure to all sorts of companies and many different types of IT environments. External audit is a great way to grow your IT knowledge and help the IT departments of both big and small companies continue to grow. I've had the opportunity to work with billion dollar companies as well as small start ups and everything in between. Another benefit of external audit is the number of people you'll meet in your career - working with a larger number of clients keeps your day to day work fresh and new and allows for great learning and networking opportunities. If you're into IT, I'd definitely recommend researching IT audit work. Hope that helps a bit.
Sumitra Biswal
Cybersecurity specialist
21
Answers
Bengaluru, Karnataka, India
Updated
Sumitra’s Answer
Hello James
As a software engineer for 7 years , I have been developing various software applications and predominantly in the field of security. With emerging attacks and that too sophisticated ones, it got me thinking as to how to secure a system if you do not know what is incoming through and outgoing from the system? It is imperative to analyze the information being transacted between the system and its user irrespective of the intention because it's majorly the information exchange that indicates the robustness of a system. Hence as a responsible engineer I realized I just not have to make a usable system but also a securely usable system for which apart from developing applications, I took up the role of information security analyst.
Hope I was able to help you answer your query! :-)
As a software engineer for 7 years , I have been developing various software applications and predominantly in the field of security. With emerging attacks and that too sophisticated ones, it got me thinking as to how to secure a system if you do not know what is incoming through and outgoing from the system? It is imperative to analyze the information being transacted between the system and its user irrespective of the intention because it's majorly the information exchange that indicates the robustness of a system. Hence as a responsible engineer I realized I just not have to make a usable system but also a securely usable system for which apart from developing applications, I took up the role of information security analyst.
Hope I was able to help you answer your query! :-)
James Constantine Frangos
Consultant Dietitian & Software Developer since 1972 => Nutrition Education => Health & Longevity => Self-Actualization.
6342
Answers
Gold Coast, Queensland, Australia
Updated
James Constantine’s Answer
Subject: The Benefits of Pursuing a Career as an Information Security Analyst
Dear James,
Embarking on a career as an Information Security Analyst can be a fulfilling and rewarding journey for several compelling reasons:
1. A Love for Cybersecurity: Many people are attracted to this profession due to a deep-rooted fascination with cybersecurity. As an Information Security Analyst, you have the opportunity to safeguard organizations from cyber threats, a role that is both intellectually engaging and challenging.
2. Rising Demand for Cybersecurity Experts: In today's digital world, cyber attacks are becoming more frequent and sophisticated. This has led to an increased need for proficient cybersecurity professionals. As an Information Security Analyst, you are integral to protecting sensitive data and ensuring the security of digital resources.
3. Potential for Career Advancement: This profession provides numerous opportunities for career progression and specialization within the cybersecurity realm. As you acquire more experience and expertise, you can ascend to higher roles with increased responsibilities.
4. Enhancing Organizational Security: Information Security Analysts are pivotal in strengthening an organization's overall security framework. By pinpointing vulnerabilities, implementing security protocols, and managing incidents, they ensure the protection of valuable data and uphold stakeholder trust.
5. Ongoing Learning and Skill Enhancement: Cybersecurity is a dynamic field that continually evolves. As an Information Security Analyst, you have the chance to engage in ongoing learning and skill enhancement to stay abreast of the latest trends, technologies, and threats.
6. Job Satisfaction: The sense of achievement derived from making a tangible impact on cybersecurity and safeguarding digital assets can be a powerful incentive for choosing a career as an Information Security Analyst.
In summary, the decision to become an Information Security Analyst can be driven by a passion for cybersecurity, the increasing demand for professionals in this field, opportunities for career progression, the chance to contribute to organizational security, continuous learning prospects, and the job satisfaction derived from protecting crucial information.
Here are the top 3 authoritative sources I've used:
1. (ISC)²: An international nonprofit membership association, (ISC)² is dedicated to creating a safe and secure cyber world. They offer several information security certifications, including the Certified Information Systems Security Professional (CISSP) certification.
2. Cybersecurity & Infrastructure Security Agency (CISA): As a government agency, CISA spearheads the national effort to protect critical infrastructure against cyber threats. They offer resources, guidelines, and best practices related to cybersecurity.
3. SANS Institute: A cooperative research and education organization, the SANS Institute offers information security training and certification programs. They provide valuable insights into cybersecurity trends, threats, and best practices through their research and educational initiatives.
Stay safe and blessed,
James Constantine.
Dear James,
Embarking on a career as an Information Security Analyst can be a fulfilling and rewarding journey for several compelling reasons:
1. A Love for Cybersecurity: Many people are attracted to this profession due to a deep-rooted fascination with cybersecurity. As an Information Security Analyst, you have the opportunity to safeguard organizations from cyber threats, a role that is both intellectually engaging and challenging.
2. Rising Demand for Cybersecurity Experts: In today's digital world, cyber attacks are becoming more frequent and sophisticated. This has led to an increased need for proficient cybersecurity professionals. As an Information Security Analyst, you are integral to protecting sensitive data and ensuring the security of digital resources.
3. Potential for Career Advancement: This profession provides numerous opportunities for career progression and specialization within the cybersecurity realm. As you acquire more experience and expertise, you can ascend to higher roles with increased responsibilities.
4. Enhancing Organizational Security: Information Security Analysts are pivotal in strengthening an organization's overall security framework. By pinpointing vulnerabilities, implementing security protocols, and managing incidents, they ensure the protection of valuable data and uphold stakeholder trust.
5. Ongoing Learning and Skill Enhancement: Cybersecurity is a dynamic field that continually evolves. As an Information Security Analyst, you have the chance to engage in ongoing learning and skill enhancement to stay abreast of the latest trends, technologies, and threats.
6. Job Satisfaction: The sense of achievement derived from making a tangible impact on cybersecurity and safeguarding digital assets can be a powerful incentive for choosing a career as an Information Security Analyst.
In summary, the decision to become an Information Security Analyst can be driven by a passion for cybersecurity, the increasing demand for professionals in this field, opportunities for career progression, the chance to contribute to organizational security, continuous learning prospects, and the job satisfaction derived from protecting crucial information.
Here are the top 3 authoritative sources I've used:
1. (ISC)²: An international nonprofit membership association, (ISC)² is dedicated to creating a safe and secure cyber world. They offer several information security certifications, including the Certified Information Systems Security Professional (CISSP) certification.
2. Cybersecurity & Infrastructure Security Agency (CISA): As a government agency, CISA spearheads the national effort to protect critical infrastructure against cyber threats. They offer resources, guidelines, and best practices related to cybersecurity.
3. SANS Institute: A cooperative research and education organization, the SANS Institute offers information security training and certification programs. They provide valuable insights into cybersecurity trends, threats, and best practices through their research and educational initiatives.
Stay safe and blessed,
James Constantine.