Home > Security

Computerworld - Executives with the following titles also bear heavy responsibility for information security:

• Global security officers (GSO) typically report to top IT executives in companies with at least $10 billion in annual revenue. A small number of them report to other chief-level executives, such as the chief corporate counsel, chief operating officer or even the CEO. These GSOs direct efforts in information risk management, security, data protection, regulatory compliance and other elements of corporate security, which could include physical security, disaster recovery or privacy. Compensation averages $250,000 to $500,000 per year, with a few earning as much as $1 million.


• Information security directors can oversee security on a global level but typically will have country-based responsibility and report to the CIO. Usually, companies that employ information security directors are filling this position for the first time. The directors have no direct staff to start. Depending on the size of the organization, responsibilities may include information security policy development, regulatory compliance, forensics investigations and all other aspects of information protection. Annual compensation averages $150,000 to $250,000, plus stock options and other incentives.

Source: Tracy Lenzner, founder and CEO, Lenzner Group, an information security executive search firm in Las Vegas.

Executive resources
Some online resources about chief security officers and security professionals:

• A job description for the CSO.


• Information on the Certification for Information System Security Professionals.


• Giga Information Group Inc. research on CSO salaries.

Read more about Security in Computerworld's Security Topic Center.