CISOs see pay rise outpace budgets as market activity intensifies

Chief Information Security Officers (CISOs) in the US and Canada received an average compensation increase of 6.7% in 2025, according to newly released benchmarking data. The increase comes as overall security budgets rose at a slower rate of 4%, their lowest level in five years.

Rising compensation

The data, based on responses from 566 CISOs, reveals a continued trend of compensation growth even as organisations face broader economic constraints. Overall, CISOs saw average compensation reach new highs across industries. Equity-based compensation in particular outpaced cash payments, as companies signal long-term strategic commitment to security leadership roles.

"CISOs have firmly established themselves as business leaders, not just security operators," said Nick Kakolowski, Sr. Research Director, IANS.

"Their pay stability this year reinforces how indispensable cybersecurity leadership has become to enterprise risk oversight, even when many organisations are tightening budgets."

Mobility trends

CISO mobility reached a six-year peak, with 15% of respondents changing employers in the past year. This is up from 11% the previous year, indicating increased market activity for executive security talent. However, those who remained with their current employers and were given expanded responsibilities saw greater compensation increases-an average rise of 8.1% compared to 5% for those who switched roles.

Pay disparity

The report highlights a pronounced gap in CISO compensation. The top 1% of earners received over USD $3.2 million in total remuneration, almost 10 times the median figure and 20 times that of the bottom 10% of respondents. Much of this variance is attributed to equity packages, though the size of the employing organisation also plays a key role. CISOs at Fortune 100 companies typically command compensation well above the average levels reported.

Sector differentiation

Technology and financial services remain the most lucrative sectors for CISOs. Average total compensation for CISOs in technology was reported at USD $844,000, and in financial services at USD $744,000. Pay packages are highest for those leading large teams-defined as 100 or more employees-or overseeing security budgets surpassing USD $50 million. Seventy per cent of CISOs receive an equity component, with top earners reporting that equity accounts for up to half their total compensation.

Executive perks

The expansion of executive perks and protections was another key trend. Seventy-one per cent of CISOs were granted one or more executive perk, with directors' and officers' insurance up from 40% to over 50% among respondents. Non-cash benefits such as deferred compensation schemes, improved health care coverage, executive coaching, legal counsel access, and severance agreements were noted as increasingly common, with one in five CISOs citing non-financial benefits in their packages.

Changing motivations

The competitive market for experienced CISOs continues, but motivators appear to be evolving. "The market for top security talent is still competitive, but motivations are shifting," said Steve Martano, IANS Faculty and Partner, Artico Search Cyber Practise. "We're seeing more CISOs prioritise influence, visibility, and culture over pure compensation. The smartest companies are responding by giving their security leaders a true seat at the table, not just a bigger paycheck."