A new survey suggests that the role of head of AI security is quickly becoming commonplace in the largest firms. Among organisations with annual revenues of $10 billion or more, about 65% have established a head of AI security, with around 18% creating the role as a dedicated appointment and 47% combining it with another leadership position. The trend is less pronounced in smaller companies, where 9% of firms with $1–$10 billion in revenue and 6% of those under $1 billion have such a role.
The researchers note that the rapid growth of AI is driving demand for leaders who can bridge security, risk and compliance while understanding how the business intends to use the technology.
Despite this growth, clear accountability for AI governance is far from settled. In large organisations, CISOs are responsible for AI governance in only about 7% of cases; chief AI officers most often hold accountability (22%). Across small, medium and large firms, 14–19% report no single executive accountable for AI governance, and a large share of respondents have yet to establish board-level committees on AI ethics or responsible AI (43–48% report no such committee planned).
The report’s author emphasises that organisations will need to restructure security teams to keep governance aligned with rapid AI adoption, and to decide whether internal capability can meet future demand.
The compensation landscape points to the premium placed on experience. In $10 billion-plus businesses, deputy-level security professionals with eight to 15 years’ experience earn roughly $35,000 more than those with under eight years, and the gap widens to about $50,000 for more than 16 years’ experience. In large organisations, the average salary for Deputy CISOs sits around $350,000 per year, with BISOs earning about $342,000. The report notes that broader CISO salary data was not included. 20 October 2026.