Career Escape
Moving from IT support specialist to information security analysts, by the occupational data
Both occupations are described by the same O*NET 30.3 rating system, which makes them directly comparable: the same requirements, rated for each. What follows is that comparison for IT support specialists and Information Security Analysts, not an opinion about whether the move is a good idea.
Can an IT support specialist become an information security analysts?
The overlap here is narrower than the two job titles suggest: 51% of what O*NET 30.3 rates as important to either occupation is important to both. The requirements that carry across include Performing Administrative Activities, Providing Consultation and Advice to Others, Telecommunications. It sits at Job Zone 4 against Job Zone 3 for IT support specialists, which usually means a further credential, a licence, or a longer runway of experience. BLS lists bachelor's degree as the typical entry education here, against some college, no degree for IT support specialists. What would be new concentrates in transferable skills: Quality Control Analysis, Systems Evaluation, Coordination. BLS puts the 2025 national median wage for information security analystss at $129,180 against $61,860 for IT support specialists, a difference of 109% upward at the occupational level rather than for any individual move. BLS projects employment in the destination occupation to grow 21.0% between 2025 and 2035, with about 14,100 openings a year on average. O*NET describes the destination as follows: Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. This compares two occupations, not two people, and says nothing about whether any individual would be hired.
- Weighted overlap
- 51% of the requirements important to either occupation are important to both, with 1 of those shared requirements classed as distinctive rather than near-universal.
- Preparation level
- O*NET Job Zone 4, against Job Zone 3 for IT support specialists. Typically 3 levels of further education.
- Typical entry education (BLS)
- Bachelor's degree, against Some college, no degree for IT support specialists.
- Prior experience typically expected
- Less than 5 years, with no on-the-job training category assigned.
- Where the overlap is strongest
- Knowledge, with 1 distinctive requirements important to both. Requirements that carry over include Performing Administrative Activities, Providing Consultation and Advice to Others, Telecommunications.
- Independent corroboration
- O*NET separately lists this occupation as directly related to 1 of the occupations in this source set, which is a signal independent of the overlap measure.
Source and method
O*NET 30.3 Database, with BLS Employment Projections Table 5.4. Verified 2026-09-02. Importance ratings, Job Zones and occupational titles are read from O*NET. Typical entry education, prior experience and on-the-job training are read from BLS. The weighted overlap percentage, the distinctive-requirement counts, and the shared and new requirement lists are computed by RoleSprint from those inputs using the method published at /career-change/methodology.
Career transition data
IT Support Specialist to Information Security Analysts
- Work activities overlapderived
- 76%
- Knowledge overlapderived
- 49%
- Transferable skills overlapderived
- 31%
- Essential skills overlapderived
- 62%
- Job Zone
- 3 to 4
- Median annual wage, 2025
- $61,860 to $129,180
- Wage differencederived
- +$67,320 (+109%)
- Projected employment change, 2025–35
- +21.0%
- Annual openings, 2025–35 average
- 14,100
- Typical entry education
- Bachelor's degree
Largest transferable capability: Working with Computers
Largest new demand: Public Safety and Security
Source. Job Zone and requirement ratings: O*NET 30.3. Wage, employment projections, openings and entry education: BLS Employment Projections Table 1.2, projections 2025–35, wage year 2025. RoleSprint-derived. Overlap percentages and the wage difference are calculated by RoleSprint from those published values. Limitation. These are national occupational statistics for two occupations. The wage figure is not a salary you would be offered, employment growth is not job security, and overlap is not a likelihood of being hired. Fields BLS does not publish for an occupation are omitted rather than estimated.
What carries over
Requirements O*NET rates as important for both IT support specialists and information security analystss, by domain. Most distinctive first, so the top of each list is the part that is actually worth putting on a resume.
Work activities
21 of 25 work activities important to either occupation are important to both.
- Performing Administrative Activities3.1 for IT support specialists, 3.3 here
- Providing Consultation and Advice to Others3.4 for IT support specialists, 3.0 here
- Developing Objectives and Strategies3.2 for IT support specialists, 3.3 here
- Estimating the Quantifiable Characteristics of Products, Events, or Information3.0 for IT support specialists, 3.2 here
- Working with Computers4.8 for IT support specialists, 4.7 here
Knowledge
7 of 12 knowledge areas important to either occupation are important to both.
- Telecommunications3.9 for IT support specialists, 3.6 here
- Engineering and Technology3.6 for IT support specialists, 3.6 here
- Computers and Electronics4.9 for IT support specialists, 4.3 here
- Administration and Management3.6 for IT support specialists, 3.7 here
- Education and Training3.7 for IT support specialists, 3.2 here
Transferable skills
5 of 12 transferable skills important to either occupation are important to both.
- Operations Monitoring3.0 for IT support specialists, 3.0 here
- Systems Analysis3.0 for IT support specialists, 3.4 here
- Complex Problem Solving3.6 for IT support specialists, 3.8 here
- Time Management3.0 for IT support specialists, 3.1 here
- Judgment and Decision Making3.3 for IT support specialists, 3.4 here
Essential skills
7 of 8 essential skills important to either occupation are important to both.
- Writing3.5 for IT support specialists, 3.5 here
- Active Learning3.1 for IT support specialists, 3.3 here
- Reading Comprehension4.0 for IT support specialists, 4.0 here
- Monitoring3.1 for IT support specialists, 3.4 here
- Critical Thinking3.8 for IT support specialists, 3.9 here
Numbers are O*NET Importance, on a 1 to 5 scale. A requirement counts as important at 3.0 and above, which is the threshold the whole comparison uses.
What would be new
Requirements important for information security analystss and not important for IT support specialists. This is the part you would have to be able to evidence, and it is usually the real obstacle rather than the job title.
Knowledge
1 knowledge areas rated important here and not for IT support specialists.
- Public Safety and Security3.3 here, 2.4 for IT support specialists
Transferable skills
3 transferable skills rated important here and not for IT support specialists.
- Quality Control Analysis3.0 here, 2.9 for IT support specialists
- Systems Evaluation3.0 here, 2.9 for IT support specialists
- Coordination3.0 here, 2.9 for IT support specialists
Practical caveats for this move
Specific to this pair, and worth reading before treating any of the above as a plan.
- The preparation gap is real: Information Security Analysts sits a Job Zone above IT support specialists, and Job Zone differences usually show up as a licence or a credential rather than as extra experience. Check the licensing rules in your state before anything else.
- BLS records "Less than 5 years" of prior experience in a related occupation as typical for this role. Whether your current work counts as related is an employer's judgement, and it is the single thing most worth testing against a real posting.
- O*NET independently lists this as a related occupation, so two separate parts of the dataset agree that the work is adjacent.
- None of this accounts for licensing, geography, pay, hiring volume, or whether you would want the work. Occupational data describes the job. It does not describe the market for it, and it does not describe you.
How this move compares with the alternatives
This page is one move. The Opportunity Atlas puts every destination mapped from IT support specialists side by side on skills overlap, day-to-day work, wage, projected growth, openings and the size of the training step.
It does not rank them, because the dimensions genuinely disagree: measured across every transition published here, how much your skills carry over and how much your knowledge carries over are close to unrelated. You choose which one matters and it orders by that.
Compare the alternatives in the Opportunity AtlasThe destination occupation, as O*NET describes it
Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.
O*NET-SOC 15-1212.00. Full title: Information Security Analysts. Where this page uses the shorter phrase “information security analysts”, that is a common name for readability, not a separate occupational classification.
This page includes information from the O*NET 30.3 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET® is a trademark of USDOL/ETA. RoleSprint has modified all or some of this information. USDOL/ETA has not approved, endorsed, or tested these modifications. Analysis generated 2026-09-02 from the O*NET 30.3 Database. Entry education, work experience, and on-the-job training are reproduced from BLS Employment Projections Table 5.4, Education and training assignments by detailed occupation, 2024, published by the U.S. Bureau of Labor Statistics.
What to do next
Occupational data compares two jobs. It cannot tell you whether one specific employer would consider you, and this is the point where most people stop reading data and start applying blind.