Jobs › CISM
CISM Jobs: Certified Information Security Manager Careers
CISM, the Certified Information Security Manager, is the leading credential for security leadership and governance.
CISM, from ISACA, certifies the management side of information security, governance, risk management, program development, and incident response, rather than the hands-on technical side. It is built for people who run security programs and answer for them to the business, which is why it shows up on security manager, security governance, and CISO-track roles.
In a GRC context, CISM is the bridge between security and governance. It signals that a candidate can set security strategy, manage risk, and align a security program with business and regulatory requirements, and it pairs naturally with CRISC and CISSP.
CISM: Frequently Asked Questions
What is CISM?
CISM, the Certified Information Security Manager, is an ISACA credential focused on information security management, governance, risk, and program leadership.
How is CISM different from CISSP?
CISM emphasizes the management and governance of security programs, while CISSP covers a broader, more technical body of security knowledge. Many security leaders hold both.
What roles ask for CISM?
Security manager, information security governance, risk and security program leadership, and CISO-track positions.
Open CISM GRC jobs (52)
Staff GRC Analyst
Principal - IAM Governance
Technology Risk Management Manager (Quản lý Quản trị rủi ro Công nghệ thông tin)
Security Engineer, Corporate Security
GRC Engineer
GRC Manager
Systems Risk Analyst
Quality Assurance Program Manager
Security Compliance Operations Specialist
Director, Governance Risk & Compliance
Senior Compliance Program Manager, GRC
Senior Compliance Analyst, Snowgov Compliance
Security Risk & Compliance, Agent Security
Third-Party Risk Management (TPRM) Risk Analyst
Risk Advisory - Associate Director (IT Risk)
Sr. Cyber Assurance Analyst, Finance
Sr. Cyber Assurance Analyst, Starlink
IT Risk & Information Security Analyst
Staff Security Governance Engineer, Policies & Standards
Network Security & Cyber Resilience Project Manager - Assistant Vice President
GRC Manager
Senior Technical Architect (GRC)
GRC, Data Privacy & Technical Cybersecurity SME - Senior Manager
Senior Security Risk Engineer
Technology and Security Risk Director
Resilience Operations Lead
Security Risk & Compliance, Data Centers & Compute
Business Continuity and Disaster Recovery - Senior Manager
Risk Advisory - Senior Associate (IT Risk)
GRC Principal - Data Privacy and Security
Senior Risk Analyst
Senior Risk & Governance Engineer
DORA Governance & TPRM Specialist
ICT Risk Analyst
Governance, Risk & Compliance (GRC) Lead, Federal
Director, Enterprise Third-Party Risk Management Operations & Governance
Subject Matter Expert, GTM GRC - V4G
Director of Cybersecurity Governance, Risk and Compliance
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Security, Risk and Compliance Consultant
Operational Resilience Manager
ICT Risk Oversight Lead
Senior Manager, Information Compliance, AI Governance & Privacy
Virtual CISO & Cybersecurity Practice Lead
Security, Risk and Compliance Consultant
Director of Governance, Risk & Compliance (GRC)
Sr Manager, Governance, Risk, Compliance & Privacy
CISM jobs: what the market looks like right now
A snapshot built from the 52 CISM roles currently on this page.
What these roles pay by level
| Level | Median midpoint | Postings |
|---|---|---|
| Mid-level | $188k | 7 |
| Senior / lead / manager | $165k | 6 |
How these figures were calculated, and sources
Primary source: our own board. Every figure above is the median midpoint of the salary ranges published in the live postings on this page. Nothing is estimated, modeled, or carried over from a previous month. It is recalculated each time the board refreshes.
What is included. Only postings that publish a salary range. Hourly, weekly and monthly rates are annualised (2,080 hours, 52 weeks, 12 months). Ranges below $20,000 a year are excluded as data-entry placeholders. A seniority band is shown only when at least five postings support it; director and executive / c-suite are present on this page but below that threshold, so no median is published for those bands.
What this is not. These are advertised ranges, not accepted offers. Advertised ranges tend to run wider than what is actually paid, and roles that do not publish a range are missing from the calculation entirely, which can bias the result upward.
For an independent benchmark, compare against the U.S. Bureau of Labor Statistics Occupational Employment and Wage Statistics for SOC 13-2054 — Financial Risk Specialists, published annually at bls.gov/oes. BLS reports actual wages across all employers rather than advertised ranges, so its medians normally sit below job-board figures.
Where the work is
- Work mode: 8 remote, 1 hybrid, 43 on-site or unstated.
- Seniority mix: senior (23), mid (21), director (6), executive (2)
- Employers hiring more than one: SEI (8), Anthropic (2), Riveron (2), SpaceX (2), Gitlab (2), CFGI (2)
Skills these postings ask for
- risk register ownership
- control self-assessment (RCSA)
- quantitative risk modeling
- scenario analysis and stress testing
- KRI design and monitoring
How to get a risk management job — the full career guide for this field: entry routes, transferable backgrounds, certifications and salary by level.
Certifications that come up most
None of these are universally required, but they appear often enough in CISM postings to be worth knowing: FRM, PRM, CRISC, CRMA. The certification academy covers what each one actually tests and who it is for.
Hiring for CISM?
We have 52 open CISM roles on the board right now. Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.
Post a job Pricing from $99 · About GRC Careers · Hiring toolkit
About the CISM certification · All GRC jobs · Job alerts