Job Placement · Cybersecurity · CISO

CISO Recruiters: Negotiated on Liability and Reporting Line, Not Salary Alone

BEG recruits CISOs through direct hire milestone billing, not a percentage of salary. The fee for this seat runs $33,440 to $40,128, priced at Tier VI, with an average fill time of 23 to 35 days, and the reporting line, budget and liability terms are addressed before salary, not after.

See your placement estimate - no call required

See pricing before you talk to anyone. No demo gate, no obligation, and no co-employment.

23-35Days to fill on average
86%Fill rate on active searches
$33,440Tier VI milestone fee, from

TL;DR

This is the one seat on the ladder where BEG's fee is not automatically a discount. At the typical manager benchmark it runs about even with a contingency fee, and it is clearly cheaper only once the comparison moves to real executive pay, where this seat is actually priced.

The Hiring Problem

Why is a CISO hard to hire?

Personal exposure sets the terms. The finalist wants a defined reporting line to the CEO or board, a budget commitment and liability coverage in writing, and a search run as a salary negotiation stalls before any of that is on paper.

$507,730
90th percentile wage, chief executives
Chief executives reach a $507,730 90th percentile against a $213,990 median, the range a board actually pays once this seat is treated as an executive officer rather than a senior manager. BLS OEWS
Domain one, twice
Both major credentials open with governance
The CISSP's first of eight domains is Security and Risk Management and the CISM's first of four domains is Information Security Governance, and both are experience gated rather than open to anyone who studies for the exam. ISC2 and ISACA
Chief Security Officer
Where BLS says analysts advance to
BLS notes that information security analysts may advance to become chief security officers, and that computer and information systems managers may carry titles such as CIO or CTO, two paths that converge on this seat. BLS OOH

How BEG Fills This Seat

The CISO search, step by step

Four steps that put reporting line, budget and liability on paper before salary, since that order is what actually closes this search.

StepWhat it requiresWhere it stalls
Name the reporting line before sourcingWritten confirmation the seat reports to the CEO or the board, not several levels down through a CIOThe org chart is still undecided when the search starts, so finalists cannot evaluate the offer against their own exposure
Put budget and liability coverage on paperA stated budget commitment and directors and officers liability coverage specific to this seat, in writingA search run as a pure salary negotiation never reaches this conversation, and the strongest finalist withdraws first
Source for risk acceptance experienceCandidates who have personally made or signed off risk acceptance decisions, not just run an engineering orgStrong VPs of security have run large programs but have never personally accepted risk on a company’s behalf
Close with exposure addressed, not just payAn offer package that answers liability and authority questions before it states a numberAn offer that leads with salary and defers liability terms loses the finalist to an employer who leads with the terms

This search fails on terms, not on talent. BEG gets the reporting line, the budget and the liability position in writing before a number is discussed with the finalist.

Milestone Billing Against Contingency

At the $175,140 May 2025 median for computer and information systems managers, used here as the closest labeled proxy, a 20 percent contingency fee runs $35,028 and a 25 percent fee runs $43,785. BEG's Tier VI milestone fee for this seat is $33,440 to $40,128, 95 to 115 percent of the 20 percent figure and 76 to 92 percent of the 25 percent figure. At this benchmark, BEG costs about the same as a contingency search, not less, and we say so plainly rather than round it into a discount. BLS OEWS

What Changes at Real Executive Pay

The comparison flips once the wage matches how this seat is actually priced. At the $297,510 90th percentile for the same manager code, BEG is 56 to 67 percent of a 20 percent contingency fee. Against the $213,990 chief executive median, the closer proxy for a CISO on the executive team, BEG is 78 to 94 percent of the 25 percent figure. The verdict depends entirely on which wage a board is willing to name. BLS OEWS

Direct Hire, Contingency, or Staffing

How BEG compares for a CISO

This seat carries personal, named accountability to the board and regulators, exposure that a staffing contract cannot structure around and that a broad contingency search rarely screens for directly.

ModelWho employsHow you payRight when
BEG, direct hireYou, the company, once the appointment is signedA fixed Tier VI milestone of $33,440 to $40,128, set independent of the final compensation packageYou need reporting line, budget and liability terms negotiated alongside the hire itself, not after
Contingency recruiterYouTypically 20 to 25 percent of first year base pay, billed once the CISO startsYour board has already fixed the reporting line and liability terms and just needs candidate flow
Staffing agencyNot applicable at this levelDay rates or hourly billing built for contract work, not a named executive officerThis model does not fit a seat with personal, named accountability to the board and regulators

Named accountability to a board is not a role a staffing agency contractor can hold. See the rest of the ladder on the cybersecurity hub.

FAQ

Common questions about hiring a CISO

What does a CISO actually own?

Accountability to the board and regulators for the company’s security posture, the risk acceptance decisions, breach response and disclosure, and the whole program and its budget. Hands on engineering sits below this seat.

Is BEG cheaper than a contingency recruiter for a CISO search?

Not always. At the $175,140 manager median, BEG’s fee is 95 to 115 percent of a 20 percent contingency fee, about the same cost, not a discount. BEG is clearly cheaper once the comparison moves to the 90th percentile or to chief executive pay.

What is BEG’s price for a CISO search?

A fixed Tier VI milestone, $33,440 to $40,128, agreed before sourcing starts and independent of the final base, equity or bonus the board settles on.

Why do CISO searches stall?

Personal exposure sets the terms. The finalist wants a defined reporting line, a budget commitment and liability coverage in writing, and a search run purely as a salary negotiation never reaches that conversation.

How is this different from a VP of security?

Both sit on the executive team, but this seat carries direct, named accountability to the board and regulators for breach response and disclosure, a personal exposure a VP does not always carry depending on the org chart.

Does a CISO need a CISSP or a CISM?

Either credential’s governance domain applies: the CISSP opens with Security and Risk Management and the CISM opens with Information Security Governance, and both require verified experience, not just a passed exam.

What is the typical path into a CISO seat?

BLS notes that information security analysts may advance to become chief security officers, and that computer and information systems managers may carry titles such as CIO or CTO on the way to this seat.

What does liability coverage in writing actually mean here?

Directors and officers coverage specific to security decisions, named in the offer rather than assumed, so the finalist is not personally exposed for a risk acceptance decision made with board sign off.

Does OEWS wage data capture what a CISO actually earns?

No. OEWS does not publish equity, bonus or on call pay, so the figures on this page are base wage proxies from the closest labeled codes, not a full CISO compensation figure.

Why not use a staffing agency for this seat?

A seat with personal, named accountability to the board and regulators does not fit a model where the staffing agency, not you, is the employer of record.

How does BEG’s fee compare at the executive level specifically?

Against the $297,510 90th percentile manager wage, BEG's fee of $33,440 to $40,128 is 56 to 67 percent of a 20 percent contingency fee, clearly cheaper at that level.

What is out of scope for a CISO?

Hands on engineering and day to day tool configuration sit with the directors, managers and engineers who report into this seat. This role owns the program, the budget and the board relationship.

Compare this to a VP of security, the closest adjacent executive seat, or a director of security, who runs the program underneath this role. The complete seven tier ladder is indexed on the placement hub.

More cybersecurity placement

Ready?

See your price before you talk to anyone.

Answer a few questions, get your placement estimate in about 90 seconds. No call required, no commitment.

See your placement estimate - no call required