The recovery from the Great Recession didn’t substantially fatten paychecks for IT security personnel. SANS, the education and research institute, conducted a similar survey in 2008. In 2008, SANS researchers said they expected a big bump in salaries among the largest group of IT security practitioners. A chief information security officer with 10-plus years of experience averaged an annual salary of $141,750 in 2008. This year, that job pays on average $138,529 a year for those on the job between 11 and 15 years.”]
Source: https://www.cuinfosecurity.com/blogs/it-security-salaries-are-stagnant-p-1668/op-1