The recovery from the Great Recession didn’t substantially fatten paychecks for IT security personnel. That’s one takeaway from research published by SANS, the education and research institute, which conducted a similar survey in 2008. In 2008, SANS researchers said they expected a big bump in salaries among the largest group of IT security practitioners, those who then earned between $80,000 and $100,000. A CISO with 16 to 20 years of experience saw a paltry increase in average salary to $148,000 in 2014.”]
Source: https://www.inforisktoday.com/blogs/it-security-salaries-are-stagnant-p-1668/op-1