Information Security Management

About the role

Information Security Management refers to an organization's strategic efforts to safeguard IT-related assets and information resources. This senior-level role typically commands an average annual salary of US$154k.

Common feeder functional areas

• Cybersecurity Consulting
• Cybersecurity Analysis
• Vulnerability Discovery and Assessment
• GRC
• IT Risk Analysis

Common next functional areas

• Security Executive
• Audit Executive
• Privacy Engineering
• Privacy Executive
• Risk Executive

Directly related roles

• Cybersecurity Manager
• Director of Cybersecurity

Most common skills required

According to market employment data, these are the most prominent business skills required to excel in the Information Security Management area and requested by employers:

• Cybersecurity
• Management
• Communication
• Leadership
• Computer Science
• Operations
• Auditing
• Vulnerability Management
• Problem Solving

Education

Information Security Management roles generally require an undergraduate degree.

Certifications

• CISM—Certified Information Security Manager: ISACA's Certified Information Security Manager (CISM) is the standard achievement certification for expert knowledge and experience in IS/IT security and control.
• AAISM—Advanced in AI Security Management: For CISM and CISSP holders with experience in AI security, ISACA Advanced in AI Security Management enhances skills to identify, assess and mitigate risk across enterprise AI solutions.

Resources

ISACA resources are designed to help you expand your knowledge, develop relevant skills, and stay current in this functional area. To learn more about specific job roles and explore additional resources, click on any directly related job roles above.

Professional development

• Cybersecurity Awareness Resources: ISACA offers Information Cybersecurity resources across audit & assurance, governance, enterprise, information security, and risk topics.
• ISACA Local Chapters: ISACA has over 200 chapters worldwide, offering a variety of benefits to members, including networking, education, and career development opportunities.
• Member Experience Leadership Series: Grow your leadership skills with access to expert-led events with an ISACA membership. Earn free CPE while learning to lead yourself, others, and your organization with confidence.
• ISACA Conferences: From in-person, virtual to hybrid, ISACA's conferences help you connect with professionals worldwide and expand your knowledge wherever you are.