02 Apr 2026 CISO Salary And Compensation Data
This week in cybersecurity from the editors at Cybercrime Magazine
Sausalito, Calif. – Apr. 2, 2026
The 2026 CISO Report from Cybersecurity Ventures in partnership with Sophos is out, with the latest chief information security officer compensation figures from a variety of sources.
According to Glassdoor data, the median annual pay range for a CISO is $321,000, while Salary.com puts the figure at $385,000. Lower tier estimates, provided by Zippia, bottom out at $144,000.
CSO reports that CISO pay at the largest U.S. enterprises is closer to $500,000, with some CISOs receiving 7-figure annual compensation packages, and a few even hauling in $5 million a year.
Estimated equity values are driving significant increases in year-over-year compensation for CISOs, particularly in larger public companies. CISOs in publicly traded companies typically receive better compensation-related benefits, such as equity, insurance, and signing bonuses, according to the 2025 CISO Security Leadership Survey from Hitch Partners.
CISOs in the technology and services sector earn the highest total compensation on average, largely driven by equity and long-term incentives, according to a survey by Heidrick & Struggles.
The survey also states that CISOs in Europe earned less on average than their U.S. counterparts. U.S. Cities including San Francisco, New York, Seattle, and Washington, D.C. offer the highest salaries, according to an analysis of compensation data from publicly available job postings, salary benchmarks from trusted job sites and recruiter-reported ranges from cybersecurity hiring reports.
Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:
- SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
- NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
- HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
- VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
- M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
- BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
- PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
- PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
- RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.
Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.
