Information Security Analysts

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.

The occupation "Information Security Analysts" has an automation risk of 53.7%, based on a base risk estimate of 54.5%. This moderately high risk reflects how many of the tasks performed by these analysts can be at least partially automated with current and near-future technology. Many aspects of the role involve structured, repetitive activities that are well-suited for automation, especially as cyber threats and security protocols become increasingly standardized. However, the risk level stops short of being overwhelming due to the continued importance of human expertise, judgment, and coordination in protecting organizational information assets. The top three most automatable tasks for Information Security Analysts involve methodical, rule-based activities. Developing plans to safeguard computer files against unauthorized modification or destruction can often be handled by automated policy engines and security management platforms. Monitoring current reports of computer viruses and determining when to update virus protection systems is another task where automated tools and artificial intelligence can rapidly ingest threat data and manage system updates without human intervention. Similarly, encrypting data transmissions and erecting firewalls can be handled automatically through pre-configured security software, reducing the need for manual oversight in these areas. On the other hand, the most automation-resistant tasks highlight where human intervention is still crucial. Training users and promoting security awareness require communication skills, adaptability, and the ability to assess human factors—qualities that algorithms struggle to replicate. Coordinating the implementation of computer system plans with personnel and outside vendors demands nuanced negotiation and context-sensitive decision-making, further resisting automation. Monitoring use of data files and regulating access, while partially automatable, still often requires human oversight to interpret suspicious activity and enforce complex policies. The main bottleneck skills that limit automation in this occupation—originality (scored at 3.0% and 3.3%)—reflect the need for creative problem-solving and innovative thinking, which current technologies cannot fully emulate.