Computed report · from the Wire
CISO moves in 2026, by the record
189 records · Updated · CSV download · free to cite with attribution
The CISO Tribune Wire holds 165 confirmed CISO appointments and 24 departures announced in 2026, at 174 organizations. June carries the most appointments on record, 33. Where the record names the new CISO's previous organization, 89% came from outside. Where it names a previous title, 43% took their first CISO seat. 10 new titles combine the CISO role with another office.
Every number on this page is counted by code from the confirmed records on the Wire, each of which cites the announcement it rests on. A record that does not state a previous organization or title is counted as not stated, never guessed. The page is recomputed every time the site is published.
Month by month
Appointments and departures by the month they were announced. Records dated only to a week or a month count in that month.
Source: CISO Tribune Wire records, counted at build
| Label | appointments |
|---|---|
| Jan | 7 |
| Feb | 9 |
| Mar | 14 |
| Apr | 8 |
| May | 11 |
| Jun | 33 |
| Jul | 23 |
| Aug | 14 |
| Sep | 28 |
| Oct | 9 |
| Nov | 9 |
Source: CISO Tribune Wire records, counted at build
| Label | departures |
|---|---|
| Jan | 1 |
| Feb | 1 |
| Mar | 2 |
| Apr | 2 |
| May | 0 |
| Jun | 3 |
| Jul | 1 |
| Aug | 4 |
| Sep | 8 |
| Oct | 2 |
| Nov | 0 |
| Month | Appointments | Departures |
|---|---|---|
| January 2026 | 7 | 1 |
| February 2026 | 9 | 1 |
| March 2026 | 14 | 2 |
| April 2026 | 8 | 2 |
| May 2026 | 11 | 0 |
| June 2026 | 33 | 3 |
| July 2026 | 23 | 1 |
| August 2026 | 14 | 4 |
| September 2026 | 28 | 8 |
| October 2026 | 9 | 2 |
| November 2026 | 9 | 0 |
Sector and region of the hiring organization
165 of the 165 appointments are at an organization with a sector on record. Financial Services accounts for 42 of them.
Source: CISO Tribune Wire records, counted at build
| Label | appointments |
|---|---|
| Financial Services | 42 |
| Technology | 39 |
| Cybersecurity Vendors | 25 |
| Government and public | 14 |
| Healthcare | 12 |
| Industrial & Energy | 9 |
| Retail & Consumer | 8 |
| Education & Nonprofit | 7 |
| Professional Services | 6 |
| Telecom & Media | 3 |
| Sector | Records | Share |
|---|---|---|
| Financial Services | 42 | 25% |
| Technology | 39 | 24% |
| Cybersecurity Vendors | 25 | 15% |
| Government & Public Sector | 14 | 8% |
| Healthcare | 12 | 7% |
| Industrial & Energy | 9 | 5% |
| Retail & Consumer | 8 | 5% |
| Education & Nonprofit | 7 | 4% |
| Professional Services | 6 | 4% |
| Telecom & Media | 3 | 2% |
Source: CISO Tribune Wire records, counted at build
| Label | appointments |
|---|---|
| North America | 139 |
| Asia-Pacific | 14 |
| Europe | 9 |
| Latin America | 2 |
| Middle East & Africa | 1 |
Where the new CISO came from
100 records name the new CISO's previous organization: 89 came from another organization and 11 were promoted inside the same one.
Source: CISO Tribune Wire records, counted at build
| Label | appointments |
|---|---|
| Hired from outside | 89 |
| Promoted inside | 11 |
| Not stated | 65 |
Source: CISO Tribune Wire records, counted at build · 74 of 89 previous employers have no sector on record and are left out of this chart.
| Label | outside hires |
|---|---|
| Financial Services | 5 |
| Technology | 5 |
| Cybersecurity Vendors | 2 |
| Government and public | 2 |
| Retail & Consumer | 1 |
74 of the 89 previous employers have no sector on record yet.
First seat or a repeat CISO
93 records name the previous title: 53 new CISOs had already held a CISO or Chief Security Officer seat, and 40 took their first. A deputy, assistant, associate, field or virtual CISO title counts as a first seat.
Source: CISO Tribune Wire records, counted at build
| Label | appointments |
|---|---|
| Already a CISO before | 53 |
| First CISO seat | 40 |
| Not stated | 72 |
The shape of the new title
How the announced title reads: a CISO title alone, or one combined with another office, a rank or a scope. Each title counts once, under the first shape it matches.
Source: CISO Tribune Wire records, counted at build
| Label | appointments |
|---|---|
| Combined with CIO or CTO | 8 |
| Combined, other office | 2 |
| With VP or SVP rank | 16 |
| Global or group scope | 3 |
| Public office title | 2 |
| Chief Security Officer | 2 |
| CISO title alone | 132 |
| Title shape | Records | Share |
|---|---|---|
| Combined with CIO or CTO | 8 | 5% |
| Combined, other office | 2 | 1% |
| With VP or SVP rank | 16 | 10% |
| Global or group scope | 3 | 2% |
| Public office title | 2 | 1% |
| Chief Security Officer | 2 | 1% |
| CISO title alone | 132 | 80% |
Each month's numbers, by email
When a month's moves are counted, subscribers get the numbers and the link to the updated CSV. Free; unsubscribe in one click.
Unsubscribe any time. See the privacy policy.
The data itself is public: ciso-moves-2026.csv, one row per record.
How the counts are made
- Only confirmed records count. Reported moves that no company or established publication has confirmed, sample records and records announced outside 2026 are left out.
- A record counts in the month it was announced. Records dated only to a week or a month count in that month.
- Sector and region are the hiring organization's class on the record. An organization without one counts as not classified.
- Where the new CISO came from uses only the previous organization named on the record: the same organization is a promotion, another organization is an outside hire, and no organization is not stated.
- The previous title uses only the previous role named on the record: a CISO or Chief Security Officer title, interim and acting included, counts as having held the seat before; a deputy, assistant, associate, field or virtual CISO title, or any other title, counts as a first CISO seat.
- The shape of the new title is the first of these that the title matches: combined with a CIO or CTO title, combined with another office (privacy, risk, compliance, trust, data, fraud or resilience), with a vice president rank, with a global, group or regional scope, a public office title, Chief Security Officer, and otherwise the CISO title alone.
Data: ciso-moves-2026.csv (the records this page counts, with the classes above) and moves.json (every record on the Wire). Cite as “CISO Tribune Wire data, 2026” with a link.
Frequently asked questions
How many CISOs were appointed in 2026?
The CISO Tribune Wire holds 165 confirmed CISO appointments announced in 2026 so far, and 24 departures, at 174 organizations. It counts only moves confirmed by the company or an established publication, so it is a count of the record, not of every move made.
How often do organizations promote their CISO from inside?
Of the 100 appointments whose record names the new CISO's previous organization, 11 were promotions inside the same organization and 89 were hires from outside. 65 records name no previous organization and are not counted either way.
Is this the new CISO's first CISO seat?
Of the 93 appointments whose record names a previous title, 53 had already held a CISO or Chief Security Officer seat and 40 had not; deputy, assistant, associate, field and virtual CISO titles count as a first seat.
Most recent records
November 12, 2026
Dave MacKinnon named Vice President, Technology Infrastructure and Chief Information Security Officer at JetBlue
November 10, 2026
Satyam Patel named Chief Information Security Officer at isolved
November 6, 2026
Mike Farrow named Chief Information Security Officer at Ohio State University Wexner Medical Center
November 5, 2026
Kobi Sivilya named Chief Information Security Officer and Chief Information Officer at Checkmarx
November 5, 2026
Alexander Kilian named Chief Information Security Officer at Vermiculus
Related guides
CISO Podcasts: The Shows That Interview Sitting Security Leaders
Four active podcasts interview sitting CISOs: CISO Series Podcast, Defense in Depth, The New CISO and Risky Business Features. Hosts, cadence, sponsors.
Cyber Threat Intelligence: How to Build a Program Leaders Use
Build a cyber threat intelligence program leaders use: write requirements tied to decisions, deliver to named readers, and measure decisions changed.
CISO Accountability: What the Rules Actually Put on the Role
US disclosure rules put accountability on the company, not a named CISO. EU law goes further, naming the management body itself personally liable. Here is what the SEC's and the EU's own texts say, and what 2026 survey data shows about the gap between being held accountable and being given the authority to match.