Businesses increasingly seeking greater security are correlating this with higher salaries for Chief Information Security Officers (CISOs)
In the dynamic landscape of corporate America, the role of the Chief Information Security Officer (CISO) has become increasingly vital, with a corresponding rise in compensation. According to recent reports, the current average total compensation for a CISO in the United States is approximately $577,781, a figure that includes salary, bonuses, and other incentives.
Stephen W. Walker, partner at the Fousheé Group, Inc., emphasizes the importance of attracting and retaining top talent, and the higher salary for CISOs can be seen as a reflection of their critical role in protecting an organization's assets against complex security threats.
The increase in workload and responsibilities of CISOs has created a burnout problem, and job satisfaction among CISOs is declining. However, pay transparency laws, which have been introduced in several states, requiring companies to disclose salary and compensation in job postings, may have contributed to the steady increase in CISO salaries. John Bambenek, President at Bambenek Consulting, stated that these laws have helped CISOs understand their worth.
When compared to other security leadership roles, such as the Vice President of Information Security, the average total compensation for a CISO is significantly higher, highlighting the premium placed on the CISO role as the highest-ranking security officer in an organization.
The growth in the CISO's salary has been modest, about 5%-6% annually in base pay, while total compensation growth is driven by bonuses and equity incentives, reflecting the strong demand for cybersecurity leadership amid rising cyber risks. However, historically, CISO salaries have increased faster than many traditional IT roles due to the growing importance of cybersecurity but have seen slower base pay increases recently because of economic uncertainties.
In broader comparison, CISOs now can earn compensation levels comparable to other senior leadership roles in technology and executive management, with top CISOs surpassing $1 million total compensation, placing them among high-earning corporate executives.
Despite the high compensation, CISOs continue to face value biases that leave them underpaid, as security is still not seen as a revenue generator for organizations. However, businesses are spending more on security, viewing it as a growing cost center. Corporate stakeholders are increasingly interested in understanding the risk calculus of their technology stacks, as cyber has emerged as a top business risk worldwide.
The security function has gained a higher role within a company, giving security professionals a seat at the table with the rest of leadership. This is evident in the fact that many CISOs continue to report to the CIO, suggesting that they were treated as an adjunct executive or part of the CIO's team for years. However, as CISOs are increasingly welcomed as full members of the C-suite, they are enjoying the compensation and perks that come with the status.
The majority of CISOs would consider a job change, according to IANS Research and Artico Search. Companies are willing to pay more to keep high-tech CISO talent in-house with retention packages and market-adjusted pay raises. Furthermore, CISOs with a strong tech background will earn approximately 15% more than those who have a business risk management background.
However, the high workload and burnout problem among CISOs, coupled with the potential for underpayment, may lead to CISOs abandoning the profession. This would force organizations to reconsider compensation beyond a salary, including work-life balance, to retain their top security talent.
[1] Fousheé Group, Inc. (2025). Security and Compliance Compensation Survey. [Online]. Available: https://www.fousheegroup.com/research/security-and-compliance-compensation-survey/ [Accessed 10 March 2023].
[2] Glassdoor. (2022). Vice President of Information Security Salary. [Online]. Available: https://www.glassdoor.com/Salaries/vice-president-of-information-security-salary-SRCH_KO0,22.htm [Accessed 10 March 2023].
[3] Osterman Research. (2022). The CISO Role: Evolving Responsibilities and Compensation. [Online]. Available: https://www.ostermanresearch.com/reports/the-ciso-role-evolving-responsibilities-and-compensation/ [Accessed 10 March 2023].
[4] IANS Research and Artico Search. (2022). The CISO Compensation Report. [Online]. Available: https://www.iansresearch.com/reports/the-ciso-compensation-report/ [Accessed 10 March 2023].
[5] Salary.com. (2023). CISO Salary in Florida. [Online]. Available: https://www.salary.com/research/salary/benchmark/ciso-salary-in-florida-3 [Accessed 10 March 2023].
- The increase in the role and responsibilities of a Chief Information Security Officer (CISO) has drawn attention to the importance of risk management and cybersecurity in corporate America, leading to a corresponding rise in their compensation.
- The Fousheé Group's 2025 Security and Compliance Compensation Survey reveals that the average total compensation for a CISO in the United States is approximately $577,781, making it one of the highest-earning executive roles in technology and business.
- According to Osterman Research, the CISO role's evolving responsibilities, including compliance and privacy, have driven total compensation growth for CISOs, which is mainly attributable to bonuses and equity incentives.
- As cybersecurity becomes a top business risk worldwide, corporate stakeholders are interested in understanding the risk calculus of their technology stacks, and high-tech CISO talent is earning significant compensation packages, sometimes surpassing $1 million in total compensation.
){kind=link}