Increased salaries for CISO positions, however, growth rate is sloping down
In the ever-evolving landscape of cybersecurity, the role of Chief Information Security Officers (CISOs) within organizations has taken on increased importance. According to the 2023 CISO Compensation Benchmark Study, this critical role has experienced significant growth and evolution, driven primarily by escalating cybersecurity risks and the strategic significance of the CISO position.
One of the key trends observed is the rise in base salaries and total compensation for top-tier CISOs. In the UK, for instance, salaries range from £215,000 to £330,000, with long-term incentives potentially doubling pay over a 5–8 year period [1]. In the US, the average CISO salary reached approximately $238,110 in 2025 [3], reflecting a general upward trend in compensation.
Many CISO roles also feature significant bonuses, up to 50% of base pay in certain sectors, underscoring pay inflation in response to the escalating threat landscape [1]. However, the prevalence of bonuses varies by region and company.
CISOs are increasingly reporting directly to CEOs, particularly in smaller companies, as their remit expands to encompass both cyber and physical security domains [1]. This strategic alignment is crucial amidst hostile attacks from state and organized actors.
Compensation packages often include long-term incentives such as equity or stock options, which can significantly multiply total remuneration and align CISOs’ financial rewards with organizational success over years [1].
The rise of advanced AI-driven threats has also augmented the CISO’s remit and compensation, reflecting the higher complexities of decision-making required in cybersecurity leadership [1].
In summary, the 2023 CISO compensation has grown both in base salary and incentive complexity, rewarding both short-term performance and sustained long-term impact through bonuses and equity. As CISOs play a critical role in managing evolving security threats and aligning cybersecurity with business growth, their compensation packages reflect this strategic importance.
The 2023 CISO Compensation Benchmark Study, while not fully available in the search results, highlights several trends. For instance, nearly half of the survey respondents work at companies with less than $1 billion in annual revenue. The study also found that the annual compensation for the top 10% of CISOs surpasses $1 million per year [1].
However, the pace of compensation increases for CISOs has slowed, a reality attributed to economic conditions by Nick Kakolowski, research director at IANS [2]. Despite this, CISOs are being elevated in terms of compensation and influence to a similar level as other specialists in the C-suite.
The survey of 609 security professionals in the U.S. and Canada found that the average total compensation for CISOs in the U.S. reached $550,000 this year [2]. However, security budget growth has scaled back this year due to economic uncertainty, inflation, and increased borrowing costs, according to the report [2].
Notably, only 1 in 5 CISOs are considered a C-level executive at their organization, and the percentage of CISOs considering a job change in the next 12 months has increased from two-thirds in 2022 to three-quarters in the current year [2].
These trends suggest a dynamic and evolving landscape for CISOs, one marked by increased responsibility, compensation, and strategic importance. As cybersecurity threats continue to evolve, so too will the role of the CISO and the compensation packages that come with it.
References: [1] 2023 CISO Compensation Benchmark Study [2] IANS Research Report [3] Cybersecurity Ventures 2025 Report
- In the realm of finance, the total compensation for top-tier CISOs, including base salary, bonuses, and long-term incentives like equity or stock options, has seen significant growth, particularly in the UK and US, driven by cybersecurity compliance needs and escalating risks.
- As technology advances, including the rise of AI-driven threats, the remit and thus the compensation of CISOs have expanded, making them key figures in the cybersecurity domain and aligning their financial rewards with organizational success over the long term.