5 Reasons Why Becoming a CISO Should Not Be Your End Goal

Is the CISO title really all its cracked out to be ???

Ask most cybersecurity professionals what they aspire to be and the final response is usually “I want to become a CISO”

The Chief Information Security Officer (CISO) is the most coveted title within cybersecurity as usually that is the person that calls the shots on Cybersecurity

If you become a CISO .. you essentially have “made it” in Cybersecurity

In this article .. I am going to say something that not everybody might agree with and that is .. the CISO title is not for everyone and not something everybody should try for

In fact you can be exceptionally happy and successfully in Cybersecurity without every becoming the CISO

Pfft .. you might say .. this guy is just a loser who never became a CISO and is just bitter ..

In fact I have held the position multiple times and even won the CISO of the Year award once

That is why I kind of get worried when I see Cybersecurity newbies and experienced professionals pinning all their hopes and dreams on the CISO title

Let’s delve into the five reasons why becoming a CISO should not be your end goal.

1. It is a World of Stress

The best thing about becoming a CISO is that you are ultimately responsible for Cybersecurity

The worst thing about becoming a CISO is that you are ultimately responsible for Cybersecurity ..

Being a CISO means you’re the one in the hot seat when things go sideways — which might be a malicious link click away ..

Be prepared to deal with angry CEOs and Board Members when things go wrong

If a peaceful night’s sleep and a lower caffeine intake are your thing, the CISO title might not be for you

2. It might not be what you expect

Despite the rapid pace at which cybersecurity evolves, the CISO is NOT a technical role

The primary tools you end up using might be PowerPoint and Excel

It is a strategic role where you are expected tame the lions, juggle multiple priorities, and walk the tightrope, all while maintaining a cybersecurity strategy that keeps pace with the “bad guys”.

Being a CISO often involves less hacking and more “hackling” with boardroom politics, budget restrictions, and explaining for the umpteenth time why we can’t just “turn off” the internet to solve our security issues. .

3. The Blame Game

Ah yes, the endless blame game.

The favorite pastime of every organization when a data breach happens. And guess who is the usual scapegoat?

Yep, you guessed it: the CISO.

Forget the fact that you highlighted the risk multiple times to the CEO who decided we “don't have the money right now” and ignored the glaring vulnerability

Forget your years of dedicated service, that one time you saved the company’s data from the clutches of hackers or the countless late-night emergency patching sessions.

One misstep and you could become the cybersecurity equivalent of a sacrificial lamb.

4. The CISO is not the end goal

Cybersecurity is a massively dynamic and evolving field

Treating the CISO position as an end goal is akin to finishing a marathon and then deciding to take up permanent residence at the finish line.

If you are truly passionate about cybersecurity, there’s an ocean of exploration ahead.

You could pivot into research, become a cybersecurity consultant, start your own cybersecurity firm, or even morph into a cybersecurity influencer, shouting your wisdom from every social media rooftop.

The possibilities are endless.

5. The CISO Stagnation Syndrome

Becoming a CISO doesn’t mean you’ve “made it”.

There’s always more to learn in this exciting field.

Aiming for CISO can potentially lead to the dreaded CISO Stagnation Syndrome (CSS for short), where you become so caught up in maintaining your current position that you stop striving for innovation.

It’s like reaching the level cap in a video game and realizing there’s no more loot to score.

Where is the fun in that?

In conclusion, Cybersecurity is a crazy and wild journey that does not end at the CISO role.

The ultimate end goal should be a continual commitment to learning, growth, and adding value to this dynamic industry.

So stay curious, remain adaptable, and never forget to inject a healthy dose of humor into your work.

After all, what’s cybersecurity without a few chuckles at absurdly complex passwords and occasional facepalms at user naivety?

Taimur Ijlal is a multi-award-winning, information security leader with over two decades of international experience in cyber-security and IT risk management in the fin-tech industry. Taimur can be connected on LinkedIn or on his YouTube channel “Cloud Security Guy” on which he regularly posts about Cloud Security, Artificial Intelligence, and general cyber-security career advice.

Check out my free Ebook on how to make more money in Cybersecurity here.

You can get full access to every story on Medium for just $5/month by signing up through the below link :