CISO: career path and pay in the US
Where a CISO goes next, what each step typically pays in the United States, and how exposed the path is to AI replacement. 3 steps, from CISO to CISO / Chief Information Security Officer.
Also for the United Kingdom: CISO in the UK
The path
Step 1 · 10 to 12 years
CISO
$120K to $180K
Typical US pay for this job title, retrieved September 2026.
What this step adds
Credentials that help: CISSP - Global, CISM - Global, CISA (optional) - Global, BCS Advanced Certificate - UK/EU.
Step 2 · 12 to 18 years
CISO / Chief Information Security Officer
$145K to $215K
Typical US pay for this job title, retrieved September 2026.
What this step adds
Credentials that help: CISSP - Global, CISM - Global, CISA - Global, BCS Advanced Certificate - UK/EU.
Step 3 · 18+ years
CISO / Chief Information Security Officer
$170K to $255K
Typical US pay for this job title, retrieved September 2026.
What this step adds
Credentials that help: CISSP - Global, CISM - Global, CISA - Global, BCS Advanced Certificate - UK/EU.
Exposure and pay along the path
Exposure to AI, now to later
24% → 24%
Stays level across the path. Lower is better.
Typical pay, now to later
$120K to $180K → $170K to $255K
US estimates by job title, Glassdoor, Indeed and PayScale US.
What the work involves
Determine and formulate policies and provide overall direction of companies or private and public sector organizations within guidelines set up by a board of directors or similar governing body. Plan, direct, or coordinate operational activities at the highest level of management with the help of subordinate executives and staff managers.
Skills that matter most
- Critical Thinking
- Speaking
- Reading Comprehension
- Writing
- Active Listening
- Monitoring
Knowledge areas
- Administration and Management
- Personnel and Human Resources
- English Language
- Customer and Personal Service
- Economics and Accounting
- Public Safety and Security
Education people bring
- Master's Degree: 46%
- Bachelor's Degree: 32%
- Associate's Degree or other 2-year degree: 5%
Job Zone 5, job Zone Five: Extensive Preparation Needed. Extensive skill, knowledge, and experience are needed for these occupations. Many require more than five years of experience. For example, surgeons must complete four years of college and an additional five to seven years of specialized medical training to be able to do their job.
Other paths from here
- CIO
- Security Consultant
- Board Member
- Risk Management Executive
More Executive/Leadership paths in the US
Related occupations in O*NET: General and Operations Managers, Management Analysts, Treasurers and Controllers, Social and Community Service Managers, Public Relations Managers.
Your own role
How exposed is your job, task by task? Free score in under a minute.
SourcesSalary bands: Glassdoor, Indeed and PayScale US, US national averages by job title, retrieved September 2026Skills, knowledge and education: O*NET 31.0 Database
This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET® is a trademark of USDOL/ETA. CC BY 4.0
Salary estimates by job title from Glassdoor, Indeed and PayScale, retrieved September 2026. Each band runs from 20% below to 20% above the reported average, rounded to $5K. Exposure percentages and the skills listed under each step are this app's own editorial ratings, not published data.