Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Application Security

CISOs' Salaries Expected to Edge Above $240,000 in 2018

Other IT security professionals may garner six-figure salaries as well, new report shows.

Rockstar CISOs are expected to land salary offers of $241,000 in 2018, putting them in the 95th percentile for CISO salary ranges, according to Robert Half Technology's 2018 Salary Guide released this week.

Meanwhile, CISOs in the 75th percentile salary range will likely see $204,000 in 2018, while the midpoint range will be $170,000 and the 25th percentile, $143,250, according to the report, which surveyed 740 human resource officials.

"Whether establishing a salary for a team member or trying to see where you stack up against your peers in the field, there are many factors that come into play" in salary offers, says John Reed, senior executive director of Robert Half Technology.

He noted a candidate's skills, experience, and the complexity of the role will all need to be taken into consideration when assessing which salary percentile is appropriate.

"The midpoint salary is a good indicator of someone who meets the requirements of an open role," Reed says.

The midpoint range for CISOs and information systems security managers have improved over the past couple of years. For example, the Dark Reading 2016 Security Salary Survey found the median annual salary of IT security management was $127,000.

But fast forward to 2018: the Robert Half Technology survey expects information systems security managers to earn as much as $194,250 if in the 95th percentile salary range, followed by $164,250 for the 75th percentile, $137,000 at the midpoint, and $115,250 at the 25th percentile, according to the report.

 

 

Source: Robert Half Technology

 

The salary increases expected next year are part of a trend that has been underway for the past few years, Reed says.

"We’ve seen security salaries growing relatively steadily in the past few years, especially as it has become increasingly difficult to find the talent to fill highly specialized roles," says Reed.

Twenty-two percent of CIOs say maintaining security of IT systems and safeguarding company information was their top concern, and this increased focus is driving the demand for talent, and in turn, salaries, he notes.

"Growing security initiatives have created an imbalance of supply and demand, especially for data and network security professionals who are seeing the compensation to match the complexity of safeguarding their organizations," Reed says.

Security professionals are likely to increase their marketability to prospective employers by completing these certification programs, Reed says.

Certified Information Systems Security Professional (CISSP), Check Point Firewall administration, Cisco network administration, and LINUX/UNIX administration are some of the most frequently required or preferred certifications for security professionals, he says.

"These reputable certifications are good indicators of technically proficient talent. Certifications, especially in the ever-changing and evolving area of security, demonstrate a dedication to the field and the thirst for being on the cutting edge of a profession that requires you to constantly be one step ahead of potential threats," Reed says.

Related Content:

Learn from the industry’s most knowledgeable CISOs and IT security experts in a setting that is conducive to interaction and conversation. Click for more info and to register.

Dawn Kawamoto is an Associate Editor for Dark Reading, where she covers cybersecurity news and trends. She is an award-winning journalist who has written and edited technology, management, leadership, career, finance, and innovation stories for such publications as CNET's ... View Full Bio
 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
<<   <   Page 2 / 2
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
9/1/2017 | 12:42:45 PM
India
So how long will it take before American Management tags this expense as just another IT budget bloat, can the security staff and replace with Wipro, Infosys, Tata, et al at LOWER SALARY AND BENEFIT cost???  It would say it can happen now. 
<<   <   Page 2 / 2
COVID-19: Latest Security News & Commentary
Dark Reading Staff 5/28/2020
Stay-at-Home Orders Coincide With Massive DNS Surge
Robert Lemos, Contributing Writer,  5/27/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Can you smell me now?
Current Issue
How Cybersecurity Incident Response Programs Work (and Why Some Don't)
This Tech Digest takes a look at the vital role cybersecurity incident response (IR) plays in managing cyber-risk within organizations. Download the Tech Digest today to find out how well-planned IR programs can detect intrusions, contain breaches, and help an organization restore normal operations.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-11844
PUBLISHED: 2020-05-29
There is an Incorrect Authorization vulnerability in Micro Focus Service Management Automation (SMA) product affecting version 2018.05 to 2020.02. The vulnerability could be exploited to provide unauthorized access to the Container Deployment Foundation.
CVE-2020-6937
PUBLISHED: 2020-05-29
A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers to submit data which can lead to resource exhaustion.
CVE-2020-7648
PUBLISHED: 2020-05-29
All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users who have access to Snyk's internal network by appending the URL with a fragment identifier and a whitelisted path e.g. `#package.json`
CVE-2020-7650
PUBLISHED: 2020-05-29
All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access to Snyk's internal network of any files ending in the following extensions: yaml, yml or json.
CVE-2020-7654
PUBLISHED: 2020-05-29
All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure. It logs private keys if logging level is set to DEBUG.