Information Security Analysts
The routine layer of this job is compressing.
A substantial share of this occupation's activities overlaps with what AI already does well. Expect the routine layer to compress first, and the human-anchored layer to gain weight and value.
Where this occupation sits among all 785 measured. Bands are quintiles of the real distribution. Applicability measures task overlap with observed AI usage. It is not a probability of job loss.
What this job involves
Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.
Where AI overlaps this work, activity by activity
The occupation's most important work activities (O*NET weights, normalized to this set), each with its measured AI performance across 200,000 real conversations: how often AI is used for it, how well it completes it, and how much of the activity it covers.
| Work activity | Share of role | AI performance |
|---|---|---|
| Implement security measures for computer or information systems. | 24.1% | Not observed 0.00 |
| Develop operational or technical procedures or standards. | 11.5% | High overlap 0.68 |
| Maintain current knowledge in area of expertise. | 8.7% | High overlap 0.61 |
| Test performance of computer or information systems. | 8.6% | Moderate 0.48 |
| Maintain operational records. | 8.6% | Not observed 0.00 |
| Resolve computer problems. | 8.3% | High overlap 0.64 |
| Coordinate with others to resolve problems. | 8.3% | Moderate 0.46 |
| Train others to use equipment or products. | 7.5% | Not observed 0.00 |
| Monitor operation of computer or information technologies. | 7.4% | Moderate 0.47 |
| Direct organizational operations, activities, or procedures. | 7.1% | Not observed 0.00 |
"Not observed" is a measurement, not missing data: that activity does not meaningfully appear in the usage sample. AI performance = completion × scope × coverage (user-goal view), 0–1.
What drives this score: the biggest AI-overlapped activity in this role is develop operational or technical procedures or standards; the most important activity AI is not observed doing is implement security measures for computer or information systems. The plan below is built around exactly that split.
Move first: compress the routine before it compresses you.
Next 30 days
- Take the exposed layer yourself. Your most AI-overlapped activity, Develop operational or technical procedures or standards, is exactly what a well-tooled colleague will accelerate. Be that colleague first.
- Time-box the routine. Measure how long your repeatable tasks actually take; that's the budget AI adoption will compete against, and the time you will reinvest.
Next 90 days
- Double down where humans hold. Grow the share of your week spent on work like Implement security measures for computer or information systems, measured as outside AI's current reach, and take on more of it explicitly.
- Build one AI-assisted workflow end-to-end for your team and own its quality. Being the local standard-setter compounds.
The longer game
- Position at the boundary. The valuable seat in partially-exposed occupations is the translator: someone fluent in both the domain and the tools. Certifications matter less than a demonstrated workflow portfolio.
- Recheck yearly. Elevated-band occupations move: new tools shift specific activities fast. The data vintage is printed at the top of this page.
- AI applicability score and per-activity metrics: Tomlinson, Jaffe, Wang, Counts & Suri, Working with AI: Measuring the Applicability of Generative AI to Occupations, Microsoft Research 2025 (arXiv:2507.07935), data CC BY 4.0.
- Occupation description and activity structure: O*NET 30.0 Database, USDOL/ETA, CC BY 4.0.
- Bands, personalization weights and action plans are JobRiskAI editorial layers; method and limitations on the methodology page.