CISO burnout and turnover: the numbers behind the churn

The 2026 CISO Report from Cybercrime Magazine and Sophos examines the pressures facing chief information security officers, a role widely regarded as one of the most stressful in technology. Studies cited in the report indicate that 75 percent of CISOs are interested in changing jobs, and 99 percent work extra hours each week, with one in five working an additional 25 hours.

Average CISO tenure now sits between 18 and 26 months, according to multiple industry estimates, and nearly a third of CISOs say stress is hurting their performance. The report also notes that recent incidents have seen CISOs held personally and legally responsible for breach handling and reporting, and that almost half of surveyed CISOs lack an adequate internal successor.