The recovery from the Great Recession didn’t substantially fatten paychecks for IT security personnel. In 2008, SANS researchers said they expected a big bump in salaries among the largest group of IT security practitioners, those who then earned between $80,000 and $100,000. A CISO with 16 to 20 years of experience saw a paltry increase in average salary to $148,000 in 2014; that’s not even a 1 percent annual increase. “Even though salaries may not have increased as much as we perceived, the workforce in this sector was stable,” SANS says.”]
Source: https://www.bankinfosecurity.com/blogs/it-security-salaries-are-stagnant-p-1668/op-1