CISM Jobs: Certified Information Security Manager Careers

CISM, from ISACA, certifies the management side of information security, governance, risk management, program development, and incident response, rather than the hands-on technical side. It is built for people who run security programs and answer for them to the business, which is why it shows up on security manager, security governance, and CISO-track roles.

In a GRC context, CISM is the bridge between security and governance. It signals that a candidate can set security strategy, manage risk, and align a security program with business and regulatory requirements, and it pairs naturally with CRISC and CISSP.