For most CISOs, compensation comes in three major buckets: Base salary, Bonus, and Equity. Salary and Bonus together make up what is considered to be the "cash" compensation. Equity can be in the form of Options, Restricted Share Units (RSUs), and/or Performance Share Units (PSUs).
Pictures have clickable links
Specialist US CISO recruitment firm's survey with more than 500 respondents.
2025 US averages of $476k cash and $816k overall for publicly traded and $400k cash and $657k overall for privately held companies
CISO salary information from large, public job sites such as Salary.com or Glassdoor.com should be taken with a grain of salt. The most accurate information comes from focused survey responses from sitting CISOs.
If your recruitment process is being led by an internal recruiter, your best course of action may be to cite one of the surveys above as your guideline and any numbers you would give out initially would depend upon the Cyber risk and resilience levels in the company. When working with external recruiters you can generally get a better feel for the company's desired range.
