Information Security Manager Salary in United States during 2023

Salary details

The average Information Security Manager salary lies between USD 114,000 and USD 176,000 in the United States. It represents the overall compensation/gross salary amount for the working year (before deductions like social security, taxes and other contributions), not including equity/stock options or similar benefits.

Region represents the primary country of residence of an employee during the year (or residence for tax purposes). All data shown are full-time equivalent (FTE) salaries. Part-time salary information has been extrapolated to its FTE value.

Last updated: Dec. 15, 2024

Salary trend

Top 20 Job Tags for Information Security Manager roles

The three most common job tag items assiciated with Information Security Manager job listings are ISO 27001, Compliance and CISSP. Below you find a list of the 20 most occuring job tags in 2023 and the number of open jobs that where associated with them during that period:

ISO 27001 | 40 jobs Compliance | 36 jobs CISSP | 35 jobs Cloud | 30 jobs Audits | 28 jobs ISMS | 25 jobs CISM | 24 jobs Risk assessment | 22 jobs Computer Science | 20 jobs GDPR | 19 jobs SOC | 17 jobs NIST | 16 jobs Risk management | 16 jobs SaaS | 14 jobs SOC 2 | 14 jobs Agile | 14 jobs Monitoring | 14 jobs Incident response | 13 jobs Vulnerabilities | 13 jobs Encryption | 13 jobs

Top 20 Job Perks/Benefits for Information Security Manager roles

The three most common job benefits and perks assiciated with Information Security Manager job listings are Career development, Startup environment and Flex hours. Below you find a list of the 20 most occuring job perks or benefits in 2023 and the number of open jobs that where offering them during that period:

Career development | 43 jobs Startup environment | 27 jobs Flex hours | 22 jobs Health care | 19 jobs Team events | 18 jobs Equity / stock options | 16 jobs Parental leave | 16 jobs Salary bonus | 14 jobs Competitive pay | 13 jobs Flex vacation | 11 jobs Gear | 9 jobs Medical leave | 9 jobs Home office stipend | 8 jobs 401(k) matching | 5 jobs Wellness | 5 jobs Fitness / gym | 5 jobs Insurance | 4 jobs Flat hierarchy | 3 jobs Conferences | 3 jobs Lunch / meals | 1 jobs

Salary Composition

The salary for an Information Security Manager in the United States typically comprises a base salary, performance bonuses, and additional remuneration such as stock options or profit-sharing. The base salary is often the largest component, accounting for approximately 70-80% of the total compensation package. Bonuses can vary significantly depending on the company's performance and individual achievements, usually ranging from 10-20% of the base salary. Additional remuneration, such as stock options or profit-sharing, can make up the remaining 5-10%, though this varies widely based on the company's size and industry.

In regions with a high cost of living, such as the San Francisco Bay Area or New York City, salaries tend to be higher to compensate for living expenses. Similarly, industries like finance and technology often offer more competitive compensation packages compared to non-profit or government sectors. Larger companies may also provide more substantial bonuses and stock options compared to smaller firms.

Increasing Salary

To increase your salary beyond the median for an Information Security Manager, consider pursuing roles with greater responsibility, such as Director of Information Security or Chief Information Security Officer (CISO). These positions typically offer higher compensation due to their increased scope and impact on the organization. Additionally, specializing in high-demand areas like cloud security, threat intelligence, or incident response can make you more valuable to employers.

Networking within the industry and maintaining a strong professional presence can also open doors to higher-paying opportunities. Engaging in continuous learning and staying updated with the latest security trends and technologies can further enhance your marketability and salary potential.

Educational Requirements

Most Information Security Manager positions require at least a bachelor's degree in a related field such as computer science, information technology, or cybersecurity. Some employers may prefer candidates with a master's degree in information security or business administration, especially for roles with a strategic focus.

A strong educational background provides a solid foundation in technical skills and security principles, which are crucial for managing an organization's information security program effectively.

Helpful Certifications

Certifications are highly valued in the field of information security and can significantly enhance your qualifications. Some of the most recognized certifications for an Information Security Manager include:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• Certified Ethical Hacker (CEH)
• CompTIA Security+

These certifications demonstrate your expertise and commitment to the field, making you a more attractive candidate to potential employers.

Required Experience

Typically, an Information Security Manager is expected to have at least 5-10 years of experience in information security or a related field. This experience should include hands-on technical work, as well as leadership or management roles. Experience in developing and implementing security policies, managing security teams, and responding to security incidents is highly valued.

Employers often look for candidates who have a proven track record of successfully managing security projects and initiatives, as well as the ability to communicate effectively with both technical and non-technical stakeholders.

Related salaries

Want to contribute?