CISM Jobs: Certified Information Security Manager Careers (2026)

CISM, from ISACA, certifies the management side of information security, governance, risk management, program development, and incident response, rather than the hands-on technical side. It is built for people who run security programs and answer for them to the business, which is why it shows up on security manager, security governance, and CISO-track roles.

In a GRC context, CISM is the bridge between security and governance. It signals that a candidate can set security strategy, manage risk, and align a security program with business and regulatory requirements, and it pairs naturally with CRISC and CISSP.

CISM: Frequently Asked Questions

What is CISM?

CISM, the Certified Information Security Manager, is an ISACA credential focused on information security management, governance, risk, and program leadership.

How is CISM different from CISSP?

CISM emphasizes the management and governance of security programs, while CISSP covers a broader, more technical body of security knowledge. Many security leaders hold both.

What roles ask for CISM?

Security manager, information security governance, risk and security program leadership, and CISO-track positions.