Security chiefs in publicly traded companies receive better pay packages
According to Glassdoor data, the median annual pay range for a CISO is $321,000, while Salary.com puts the figure at $385,000. Lower tier estimates, provided by Zippia, bottom out at $144,000.
CSO reports that CISO pay at the largest US enterprises is closer to $500,000, with some CISOs receiving seven-figure annual compensation packages, and a few even hauling in $5 million a year. Fortune 100 CISOs often far exceed reported averages.
Estimated equity values are driving significant increases in year-over-year compensation for some CISOs. Security chiefs in publicly traded companies typically receive better compensation-related benefits, such as equity, insurance, and signing bonuses, according to the 2025 CISO Security Leadership Survey from Hitch Partners.
CISOs in the technology and services sector earn the highest total compensation on average, largely driven by equity and long-term incentives, according to a survey by Heidrick & Struggles. The survey also states that CISOs in Europe earned less on average thantheir US counterparts.
Cities including San Francisco ($400,000), New York ($375,000), Seattle ($360,000), and Washington, DC. ($350,000) offer the highest salaries, according to CBT Nuggets, who analyzed compensation data from publicly available job postings, salary benchmarks from trusted sites including Glassdoor and Levels.fyi, and recruiter-reported ranges from recent cybersecurity hiring reports. These cities are home to large tech companies, highly regulated industries, and are frequent targets for cyberattacks—all of which demand seasoned CISOs with premium pay.
Programs.com reports that due to the relatively low turnover rate (approximately 11% per year), CISO vacancies are limited. However, when roles do open, the transition often results in a 31% salary increase.
That’s the top line on CISO pay in 2026. But, the bottom line for many companies, CSO reports, is that even a 7-figure salary can’t keep top CISOs happy.