Computed report · updates with every record
The Security Seat Index
Movement in enterprise security leadership, computed from the CISO Tribune verified record. Every figure below is derived from sourced entries on the Wire — no estimates, no survey data, no outside claims.
Basis: 441 verified moves · computed 2026-10-24 · free to cite with attribution
417
Appointments
24
Departures
12%
Internal promotions
41%
Arrived from a CISO seat
Movement by month
October 2026
6 appointments · 2 departures
September 2026
28 appointments · 7 departures
August 2026
14 appointments · 3 departures
July 2026
23 appointments · 1 departure
June 2026
30 appointments · 2 departures
May 2026
9 appointments · 0 departures
Documented successions
Appointments where the record names the predecessor — the clearest view of seats changing hands rather than being created.
Tabcorp: Maxine Harrison succeeds Josh Kam
Remitly: Jeff Lyon succeeds Darren Challey
Meta: Assaf Keren succeeds Guy Rosen
Seats currently documented vacant
Anduril — top security seat open per the record
City of Hamilton — top security seat open per the record
CrowdStrike — top security seat open per the record
Department of the Air Force — top security seat open per the record
Keyrock — top security seat open per the record
KPN (Koninklijke KPN N.V.) — top security seat open per the record
National Australia Bank — top security seat open per the record
State of California — top security seat open per the record
University of Massachusetts Amherst — top security seat open per the record
Method: computed from the open dataset. A move counts once; date precision follows the record. Cite as “CISO Tribune, Security Seat Index” with a link. Something missing? Send a tip. See also time in the CISO seat, computed from completed tenures in the same record.
Related guides
How to Become a CISO: Career Path, Experience and Certifications
There is no CISO degree and no single route to the seat. What the certification bodies, career guides and CISO Tribune's own record show about the path: typical prior roles, the certifications that actually come up, and how long it takes.
CISO Accountability: What the Rules Actually Put on the Role
US disclosure rules put accountability on the company, not a named CISO. EU law goes further, naming the management body itself personally liable. Here is what the SEC's and the EU's own texts say, and what 2026 survey data shows about the gap between being held accountable and being given the authority to match.
CISO Glossary: Cybersecurity and Governance Terms, Defined
37 terms a security leader needs on the record: core threat and defense vocabulary from CISA's NICCS glossary, plus the NIST CSF 2.0 Functions and the SEC's materiality test, each sourced to the primary document.