What is the average CISA salary?

$191K a year on average and $175K at the median, across 107 open CISA postings at companies that state pay (November 2026). The median is the better guide: a few very high offers pull the average up.

What is the typical range?

The middle half of the postings offer $149K to $225K a year. A quarter offer less and a quarter offer more.

Which companies advertise the highest CISA pay?

Anthropic ($265K), True Anomaly ($206K), GitLab ($203K), by the median of their open postings that state pay (three postings or more).

Is a cisa a high-paying job?

The median CISA posting advertises $175K a year, more than the median of all 55,899 job postings with pay on Jobs Every Hour ($174K). That is 1% above the middle of the market.

How much can you earn as a cisa?

A tenth of the postings offer $275K a year or more; the highest open CISA role advertises up to $510K. Pay rises with level: see the table by level.

What is the CISA salary per hour and per month?

The median of $175K a year is about $84 an hour (2,080 working hours) and $14,583 a month before tax. The middle half of postings: $72 to $108 an hour.

Which skills pay more for CISA roles?

Postings that ask for Infrastructure as code (+$45K, 15 postings), CI/CD (+$39K, 21 postings), CCSK (+$39K, 15 postings) advertise more than the $175K median of all CISA postings with pay.

Where do these figures come from?

From the pay ranges employers print in their own job postings, read from their careers pages every hour. The midpoint of each range is counted. These are advertised ranges for open roles, mostly in the United States and in US dollars, not what people are actually paid.

CISA Salary: $191K Average, $175K Median (Nov 2026)

CISA salary by level

Lead roles advertise a median of $238K, 44% more than senior roles ($165K). The level comes from the job title; titles without a level word are counted separately.

Level	Median salary	Middle half	Roles
Senior	$165K	$150K–$180K	33
Lead and above	$238K	$204K–$270K	32
No level in the title	$150K	$138K–$178K	42

CISA salary by location

Name	Median salary	Roles counted
🇺🇸San Francisco Bay Area	$205K	37
🇺🇸California	$205K	49
🇺🇸New York, NY	$202K	32
🇺🇸United States	$175K	100
🇺🇸Washington, DC	$175K	17

Skills that pay more for CISA roles

Skill	Median with it	Above the median	Postings
Infrastructure as code	$220K	+$45K	15
CI/CD	$214K	+$39K	21
CCSK	$214K	+$39K	15
Application security	$214K	+$39K	11
LLM	$212K	+$38K	15

Top-paying companies

Name	Median salary	Roles counted
Anthropic	$265K	9
True Anomaly	$206K	6
GitLab	$203K	3
Fivetran	$178K	3
Brex	$173K	3
SpaceX	$164K	4
Blake Willson Group	$150K	3
xAI	$149K	6
Mizuho	$128K	3

Highest-paying open CISA roles

All CISA jobs

Lead - Security Controls Assurance - SOXAnthropic · 🇺🇸San Francisco, CA | Seattle, WA | New York City, NY | Was…$410K - $510KLead and aboveRustGoPython2mo
Client Platform EngineerOpenAI · 🇺🇸San Francisco$347K - $445KHybridGoPythonDocker4w
Controls Specialist, Security GRCAnthropic · 🇺🇸San Francisco, CA | New York City, NY | Seattle, WA$270K - $345KLLMCISSPCISA6w
Principal Mission Cloud EngineerTrue Anomaly · 🇺🇸Denver, CO; Long Beach, CA$230K - $340KLead and aboveAzureCI/CDAWS3mo
Chief Information Security Officer (CISO)Insurity · 🇺🇸Remote - US$216K - $325KRemoteLead and aboveMachine LearningLLMCI/CD3w
Chief Information Security Officer (CISO)CAIS · 🇺🇸New York City$270K - $320KLead and aboveMachine LearningCISSPCISM4mo
Director, Governance Risk & ComplianceFigma · 🇺🇸San Francisco, CA • New York, NY • United States$235K - $317KLead and aboveCISSPCISMCISA4w
Sr. Manager, Security — Continuous Monitoring v 2.0Databricks · 🇺🇸Remote - California$183K - $314KRemoteSeniorPythonGCPAzure7w
Staff Security GRC AnalystSuno · 🇺🇸NYC$277K - $300KLead and aboveGCPLLMAWS5w
Head of Internal Audit (NY)KBRA · 🇺🇸New York, New York$250K - $300KLead and aboveCPACISAGenerative AI3mo
Staff Technical Program Manager, IT Audit & GovernanceMongoDB · 🇺🇸New York City; Palo Alto$151K - $297KLead and abovePythonSQLGCP9d
Head of Enterprise Risk ManagementOpenAI · 🇺🇸San Francisco$216K - $295KHybridLead and aboveCI/CDCPACISA3w
Staff Mission Cloud EngineerTrue Anomaly · 🇺🇸Denver, CO; Long Beach, CA$205K - $295KLead and aboveAzureCI/CDAWS5mo
Director, Global Public Sector Product ManagementIllumio · 🇺🇸Washington, D.C. - Remote$244K - $293KRemoteLead and aboveCISSPCISMCISA2d
Head of Security GRCDriveWealth · 🇺🇸Office - Chicago; Office - NYC$270K - $290KLead and aboveCISSPCISMCISA3mo
Staff Security Engineer, GRCOscar Health · 🇺🇸New York, New York, United States$246K - $287KLead and aboveAzureAWSCISSP2mo
Principal Security GRC Manager, Legal Assurance (USA)GitLab · 🇺🇸Remote, United States$203K - $285KRemoteLead and aboveCISSPCISMCISA10d
Information Security Manager - Identity and Access Management (IAM)Zoox · 🇺🇸Foster City, CA$228K - $273KPythonGCPAzure5w
Director IT, Internal AuditInstacart · 🇺🇸United States - Remote$204K - $258KRemoteLead and aboveGCPAgileAWS3mo
Sr. Network Security EngineerxAI · 🇺🇸Austin, TX; New York, NY; Palo Alto, CA; Washington, DC$152K - $258KSeniorPythonTerraformGCP15mo

Questions about CISA pay

What is the average CISA salary?: $191K a year on average and $175K at the median, across 107 open CISA postings at companies that state pay (November 2026). The median is the better guide: a few very high offers pull the average up.
What is the typical range?: The middle half of the postings offer $149K to $225K a year. A quarter offer less and a quarter offer more.
Which companies advertise the highest CISA pay?: Anthropic ($265K), True Anomaly ($206K), GitLab ($203K), by the median of their open postings that state pay (three postings or more).
Is a cisa a high-paying job?: The median CISA posting advertises $175K a year, more than the median of all 55,899 job postings with pay on Jobs Every Hour ($174K). That is 1% above the middle of the market.
How much can you earn as a cisa?: A tenth of the postings offer $275K a year or more; the highest open CISA role advertises up to $510K. Pay rises with level: see the table by level.
What is the CISA salary per hour and per month?: The median of $175K a year is about $84 an hour (2,080 working hours) and $14,583 a month before tax. The middle half of postings: $72 to $108 an hour.
Which skills pay more for CISA roles?: Postings that ask for Infrastructure as code (+$45K, 15 postings), CI/CD (+$39K, 21 postings), CCSK (+$39K, 15 postings) advertise more than the $175K median of all CISA postings with pay.
Where do these figures come from?: From the pay ranges employers print in their own job postings, read from their careers pages every hour. The midpoint of each range is counted. These are advertised ranges for open roles, mostly in the United States and in US dollars, not what people are actually paid.

CISA salary: $175K median