Information Security Analyst

Role Summary

Information Security Analysts design, implement, and maintain the controls that protect an organization’s information assets. They focus on governance, compliance, and technical safeguards aligned with security frameworks and regulatory requirements.

Core Responsibilities

• Develop and maintain security policies, standards, and procedures
• Conduct risk assessments and control evaluations
• Support compliance with frameworks (NIST CSF, ISO 27001)
• Coordinate audits and evidence collection
• Evaluate and implement security technologies
• Provide guidance to business units on secure practices

Key Skills

• Security governance and controls
• Risk assessment methodologies
• Regulatory and compliance knowledge
• Strong documentation and communication
• Understanding of network and cloud security

Common Backgrounds

• IT, compliance, or risk management
• Degrees in cybersecurity, MIS, or related fields
• Experience supporting audits or control testing

Relevant Designations

• CompTIA Security+
• GIAC GSEC
• ISACA CISM (associate‑level relevance)