How long does it take to become an information security analyst?

Typically about four years for the degree, then less than 5 years of related work first. That is the usual route rather than a rule — people arrive by other paths all the time.

How much do information security analysts make?

The US median is $129,180 a year, meaning half earn more and half less. Pay varies widely by state, employer and experience.

Do you need a degree to become an information security analyst?

Yes, and employers also expect years of related experience first.

Where can you train to become an information security analyst?

1,887 US colleges, community colleges and trade schools award credentials in a matching program. See which ones →

🎓 My University View

Home › Careers › Information security analysts

How to become an information security analyst

Computers & IT · SOC 15-1212

$129,180US median pay, 2025

+21%Projected growth, 2025–35

14,100Openings per year

Degree + experienceUsual way in

How you get in

Not an entry-level job: it usually takes a degree plus years of related work.

Bachelor's degree
Less than 5 years of experience in a related job
Work as an information security analyst

Programs that lead to this job

These are the federal program codes (CIP) that the Department of Education maps to this occupation, and how many US colleges, community colleges or trade schools report awarding credentials in each.

Program	Code	Schools
Computer Science	CIP 11.0701	951
Computer and Information Systems Security/Auditing/Information Assurance	CIP 11.1003	765
Information Technology	CIP 11.0103	629
Computer Systems Networking and Telecommunications	CIP 11.0901	464
Network and System Administration/Administrator	CIP 11.1001	205
Cyber/Computer Forensics and Counterterrorism	CIP 43.0403	114
System, Networking, and LAN/WAN Management/Manager	CIP 11.1002	84
Information Technology Project Management	CIP 11.1005	61
Healthcare Information Privacy Assurance and Security	CIP 51.0723	3

See the 1,887 schools that offer these programs →

Common questions

How long does it take to become an information security analyst?: Typically about four years for the degree, then less than 5 years of related work first. That is the usual route rather than a rule — people arrive by other paths all the time.
How much do information security analysts make?: The US median is $129,180 a year, meaning half earn more and half less. Pay varies widely by state, employer and experience.
Do you need a degree to become an information security analyst?: Yes, and employers also expect years of related experience first.
Where can you train to become an information security analyst?: 1,887 US colleges, community colleges and trade schools award credentials in a matching program. See which ones →

Pay and growth are national figures. What you earn depends on where you work, your employer and your experience, and these are projections rather than promises. Education requirements describe how most people enter the job, not a rule — plenty of people take another route.

Pay, growth, openings and entry requirements: US Bureau of Labor Statistics, Employment Projections 2025–35. Program-to-occupation mapping: NCES CIP–SOC crosswalk (2020/2018). School counts: IPEDS completions, 2022–23.

Related careers in Computers & IT

Software developers · Computer user support specialists · Computer systems analysts · Computer occupations, all other · Data scientists · Network and computer systems administrators · Software quality assurance analysts and testers · Computer network architects