Information security analyst: degree, IT experience and certifications
Analysts typically need a bachelor's degree in a computer field plus related work experience, often as a network or systems administrator; some enter with a high school diploma and industry training and certifications. Many employers prefer certified candidates.
For: Careful, curious people who like protecting systems, and who will keep learning as threats change.
Route 1: Degree → IT job → security analyst Typical
Many analysts first work in an information technology department.
-
Start here
High school diploma
BLS
Information Security Analysts — How to Become OneU.S. Bureau of Labor Statistics (OOH)- Checked
- 20 Oct 2026
-
About 4 years
Bachelor's degree
Computer and information technology or a related field, such as engineering or math.
BLS
Information Security Analysts — How to Become OneU.S. Bureau of Labor Statistics (OOH)- Checked
- 20 Oct 2026
-
Experience
Related IT job
Often as a network and computer systems administrator.
Network administratorBLS
Information Security Analysts — How to Become OneU.S. Bureau of Labor Statistics (OOH)- Checked
- 20 Oct 2026
-
Exam gate
Security certification
Many employers prefer it; some certifications are for entry level, others for experienced workers.
BLS
Information Security Analysts — How to Become OneU.S. Bureau of Labor Statistics (OOH)- Checked
- 20 Oct 2026
-
Goal
Information security analyst
BLS
Information Security Analysts — How to Become OneU.S. Bureau of Labor Statistics (OOH)- Checked
- 20 Oct 2026
Route 2: High school diploma + industry training and certifications Without a degree
Some workers enter the occupation with a high school diploma and relevant industry training and certifications.
-
Start here
High school diploma
BLS
Information Security Analysts — How to Become OneU.S. Bureau of Labor Statistics (OOH)- Checked
- 20 Oct 2026
-
Training
Industry training
BLS
Information Security Analysts — How to Become OneU.S. Bureau of Labor Statistics (OOH)- Checked
- 20 Oct 2026
-
Exam gate
Entry-level certification
Examples: ISC2 Certified in Cybersecurity (no work experience required) or CompTIA Security+.
ISC2
CC — Certified in CybersecurityISC2- Checked
- 20 Oct 2026
-
Goal
Information security analyst
BLS
Information Security Analysts — How to Become OneU.S. Bureau of Labor Statistics (OOH)- Checked
- 20 Oct 2026
Route 3: Experienced analyst → CISSP → security leadership Moving up
Analysts may lead a team, become an expert in one area, or advance to chief security officer.
-
Start here
Information security analyst
BLS
Information Security Analysts — How to Become OneU.S. Bureau of Labor Statistics (OOH)- Checked
- 20 Oct 2026
-
5 years
Cumulative full-time security experience
In two or more of the eight CISSP domains; a computer science or IT degree, or an approved credential such as Security+, may count for one year.
ISC2
CISSP Experience RequirementsISC2- Checked
- 20 Oct 2026
-
Exam gate
CISSP
Without the experience you can pass the exam and become an Associate of ISC2, then earn the 5 years within 6 years.
ISC2
CISSP Experience RequirementsISC2- Checked
- 20 Oct 2026
-
Goal
Chief security officer or another computer and information systems manager
BLS
Information Security Analysts — How to Become OneU.S. Bureau of Labor Statistics (OOH)- Checked
- 20 Oct 2026
Licenses, registrations and certifications
Each one is marked: a state or federal license is the law, a registration through an employer comes with the job, and a voluntary certification is one employers may ask for.
- ISC2 Certified in Cybersecurity (CC)
ISC2 · Voluntary - Entry level; no work experience required. Exam price $199.
ISC2
CC — Certified in CybersecurityISC2- Checked
- 20 Oct 2026
- CompTIA Security+
CompTIA · Voluntary - V7 (SY0-701): up to 90 questions in 90 minutes, passing score 750 on a 100–900 scale. V8 is expected on or around 17 November 2026; the English V7 exam retires on 11 June 2027.
CompTIA
CompTIA Security+ (V7): exam detailsCompTIA- Checked
- 20 Oct 2026
- CISSP
ISC2 · Voluntary - For experienced practitioners: 5 years of required work experience. Exam price $749; the exam is given in person by Pearson.
ISC2
CISSP — Certified Information Systems Security ProfessionalISC2- Checked
- 20 Oct 2026
Dates and rules to re-check
These change by season or by law. Checked 20 Oct 2026.
- CompTIA Security+ V8 is expected on or around 17 November 2026.
CompTIA
CompTIA Security+ (V7 and the coming V8)CompTIA- Checked
- 20 Oct 2026
- The English Security+ V7 exam (SY0-701) retires on 11 June 2027.
CompTIA
CompTIA Security+ (V7): exam detailsCompTIA- Checked
- 20 Oct 2026
- From 15 April 2027 the CISSP exam follows a new exam outline.
ISC2
CISSP — Certified Information Systems Security ProfessionalISC2- Checked
- 20 Oct 2026
Where to go next
Every career page in this cluster: entry, license, BLS pay and outlook.
What the job is, BLS pay and job outlook, and how to become one.