Chief Information Security Officer vs Penetration Tester: Which Pays More?
Side-by-side salary comparison by city, experience level, and career growth outlook. Data reflects current market rates.
Chief Information Security Officer
Lead the organisation's information security strategy, risk management, and compliance.
Penetration Tester
Conduct authorised attacks on systems to find and report vulnerabilities.
Chief Information Security Officer earns more on average — the national median is $94,707/year (73%) higher than a Penetration Tester. However, salaries vary significantly by city, employer, and experience level — see the city-by-city breakdown below.
Chief Information Security Officer vs Penetration Tester — Salary by City
National median figures in USD across top cities.
| City | Chief Information Security Officer | Penetration Tester | Difference |
|---|---|---|---|
| San Francisco, CA | $320,316 | $193,496 | Chief +$126,820 |
| New York, NY | $271,627 | $140,470 | Chief +$131,157 |
| Seattle, WA | $310,977 | $188,841 | Chief +$122,136 |
| Austin, TX | $253,467 | $145,769 | Chief +$107,698 |
| Chicago, IL | $242,035 | $135,251 | Chief +$106,784 |
| Boston, MA | $284,431 | $171,501 | Chief +$112,930 |
| London, UK | £178,031 | £102,480 | Chief +$75,551 |
| Toronto, Canada | CA$301,014 | CA$166,911 | Chief +$134,103 |
Frequently Asked Questions
Does a Chief Information Security Officer or Penetration Tester earn more?+
A Chief Information Security Officer earns more on average. The national median salary for a Chief Information Security Officer is $223,887/year, compared to $129,180/year for a Penetration Tester — a difference of $94,707 (73%).
Which has better career growth — Chief Information Security Officer or Penetration Tester?+
Chief Information Security Officer roles are growing at 30% YoY while Penetration Tester demand is growing at 30% YoY. Penetration Tester has stronger near-term demand growth.
Can you switch from Chief Information Security Officer to Penetration Tester?+
Yes. Many professionals transition between these roles, especially since both are in the same category. Shared skills include: analytical thinking, communication, and industry knowledge.
Which is harder to automate — Chief Information Security Officer or Penetration Tester?+
Chief Information Security Officer has a lower AI automation risk (10% vs 22%). Based on Oxford Martin School and McKinsey 2023 analysis.