Infosec Introverts

ComputerWorld’s Best Careers for the Introverted IT Pro article caught my eye.  Information Security Analyst is one of the suggested jobs.   Laurence Shatkin, author of 50 Best Jobs for Your Personality says, “This career is so focused on data and, to a lesser extent, on hardware that it offers many opportunities for solitary work.”

This is so opposite the mantra that I hear from people regarding infosec work, I thought it worth comment.

According to the Bureau of Labor Statistics, Information Security Analysts:

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses

Ok, nothing about chatting people up there.

But the Infosec Institute takes it further:

They are responsible for implementing any training required including instructing staff on proper security measures both in the office and online. The security analyst must work with business administrators as well as IT professionals in communicating flaws in security systems. They recommend changes that will improve every aspect of company security. The security analyst is also responsible for creating documentation to help the company in case there are any breaches.

It isn’t enough that the Infosec Analyst needs to have knowledge of every aspect of Information Security within a company.  They are train people, notify of vulnerabilities, work with business units, and influence executives.

It simply isn’t possible to be all things to all people.  Often the people that are great at influencing, dont have the same drive to staying current on the technology.   But to say that Infosec Analyst is a great job for an introvert because you just deal with computers and data is dated.   People are the layer 8 problem in security.   You ignore that to the detriment of your information security program.

On the whole, I think that ComputerWorld has succeeded with link bait, but failed to make great article.