CISO salary calculator — total compensation by stage, industry, and geography.

Free, live total-compensation range — base + bonus + equity at typical 4-year vest — for the CISO role across stage (director through tier-1 enterprise), industry (financial services, fintech, healthcare, tech, government), and geography (Bay Area, NYC, US national median, London, Singapore, more). 30 seconds, no signup.

What's a CISO salary in 2026?

A first-time CISO at a mid-market company earns $320,000–$600,000 in total compensation in 2026. Senior CISOs at Fortune 500 firms frequently exceed $1,000,000. The range varies by industry (financial services pays 25-40% above baseline; crypto/Web3 has materially compressed since 2022, now +10-30%), geography (Bay Area runs 30%+ over the US median), and equity structure (pre-IPO equity often outweighs cash). The calculator above lets you slot in the exact combination.

After the number — how to get there

Hitting your target comp is a 12–20-year game of correctly-stacked decisions: certification choice, specialization, industry vertical, and the moment you take ownership of board communication. Read the CISO career roadmap for the full path, take the cert match quiz to find your right credential, or play CISO Simulator free to feel the budget pressure that earns the comp.

Frequently asked: CISO salary in 2026

How much does a Fortune 500 CISO make?

Fortune 500 CISO total compensation ranges roughly $750,000–$3,000,000 in 2026, with a documented ceiling near $5 million (per CSO Online). Base salary is typically $400,000–$650,000; the rest is annual bonus (30–60% of base) and equity (often $250,000–$1,500,000+ in grant value annually).

Do CISOs really make over $1 million?

Yes — but only at large-cap public companies (financial services, tech, healthcare), late-stage pre-IPO firms with material equity, and companies recovering from a major breach who pay a credibility premium. Median first-time CISO total comp is well below $1M.

How does CISO salary differ by industry?

Financial services and fintech sit 25–40% above baseline. Healthcare and pharma run roughly flat to +10%. Tech is at-baseline but pays heavily in equity. Crypto / Web3 was at +50-80% in 2022 and has compressed to +10–30%. Government and education run 15–30% below baseline.

Is CISO salary based on certifications?

Only at the entry to mid level. Once you're a sitting CISO, certs (CISSP, CCISO, CISM) are table-stakes signals but pay is driven by company size, industry, the prior CISO's comp, and your board-defensibility. Adding a new cert as a sitting CISO sees roughly zero comp change.

Loading the calculator…