Computed report · updates with every record
Time to fill the CISO seat
Departure to the next confirmed appointment, on the record: for every company where our record holds a departure from the top security seat followed by a confirmed appointment to it, the days between the two announcements. This is what our record shows, not an industry-wide average; the record is young and skews recent, and it is capped by our own coverage.
Basis: 15 filled seats measured from 23 departures on record · 8 exact, 7 approximate · computed 2026-10-14 · free to cite with attribution
15
Filled seats measured
0 days
Median days to fill
0 days
Shortest
160 days
Longest
By year of the departure
n is the number of filled seats measured with a departure dated that year. No median or range is published for a year with fewer than 5 cases.
| Year | Filled seats measured | Median | Range |
|---|---|---|---|
| 2026 | n = 12 | 0 days | 0 to 125 days |
| 2025 | n = 3 | too few to report (fewer than 5) | |
By sector
The company's sector from our classification, a fact about the organization. Groups under 5 cases show n only.
| Sector | Filled seats measured | Median | Range |
|---|---|---|---|
| Financial Services | n = 5 | 0 days | 0 to 125 days |
| Government & Public Sector | n = 3 | too few to report (fewer than 5) | |
| Technology | n = 3 | too few to report (fewer than 5) | |
| Industrial & Energy | n = 2 | too few to report (fewer than 5) | |
| Cybersecurity Vendors | n = 1 | too few to report (fewer than 5) | |
| Healthcare | n = 1 | too few to report (fewer than 5) | |
Every filled seat measured
Newest departure first. Each row links to the departure and the appointment it is computed from. “0 days” means the successor was named in the same announcement; “about” marks a pair where one record is dated only to the week or the month.
Seats open now
8 seats are open on our record as of 2026-10-14, median about 36 days open. Not yet a fill: these are the seats the figures above will one day measure. Filters by sector and region are on the open seats page.
| Company | Seat open since | Open for |
|---|---|---|
| Department of the Air ForceGovernment & Public Sector · North America | week of March 9, 2026previous: James 'Aaron' Bishop | about 219 days |
| State of CaliforniaGovernment & Public Sector · North America | July 28, 2026previous: Vitaliy Panych | 78 days |
| University of Massachusetts AmherstEducation & Nonprofit · North America | August 2026previous: Jeremy Pelegrin | about 2 months |
| National Australia BankFinancial Services · Asia-Pacific | August 26, 2026previous: Sandro Bucchianeri | 49 days |
| AndurilIndustrial & Energy · North America | September 22, 2026previous: Joe McCaffrey | 22 days |
| City of HamiltonGovernment & Public Sector · North America | September 25, 2026previous: Kush Sharma | 19 days |
| KeyrockFinancial Services · Europe | week of September 28, 2026previous: David Cass | about 16 days |
| KPN (Koninklijke KPN N.V.)Telecom & Media · Europe | October 1, 2026previous: Vladimir Cibic | 13 days |
Method
What counts. A fill is measured when our record holds a confirmed departure from the top security seat at a company and the next confirmed event at that company is an appointment to it. The measurement is the number of days between the two announcement dates. 0 days means the successor was named in the same announcement as the departure (for week-precision records, within the same week).
What is excluded. Reported, unconfirmed moves are excluded on both sides. A departure followed by another departure before any appointment is not measured: our record missed the appointment in between. A departure with no later appointment is an open seat (listed above) or, once older than 18 months, a seat of unknown status; neither is a fill. Sample records are excluded.
Precision. A count is exact only when both records are dated to the day (8 of 15). A date known only to the week or the month is counted from the start of that week or month and the pair is shown as “about” (7 of 15); the medians above include both. Days open on the seats open now are counted the same way.
The record is ours and partial. It holds the moves we have verified, not every move that happened, and it reaches back to January 2023. The record is young and skews recent: 12 of the 15 measured fills have a departure dated 2026, and the earliest departure in a measured pair is week of April 28, 2025. No median or range is published for any group with fewer than 5 cases. Expect every figure here to move as the record ages.
Computed from the open dataset. Cite as “CISO Tribune, Time to fill the CISO seat” with a link. Something missing? Send a tip. See also time in the CISO seat, computed from completed tenures in the same record.