Meet the CISO: A new front line star in the AI cybersecurity war

Cybersecurity leaders have been thrust into a new frontline role as artificial intelligence reshapes the threat landscape and boardroom priorities. Cybersecurity budgets are expected to rise 6% in 2026 as companies race to secure AI deployments and tools, and in the Middle East and Africa spending is poised to increase 16% year over year, said IDC analyst Craig Robinson. High-profile incidents — including a July breach involving autonomous OpenAI agents on the Hugging Face platform — have accelerated demand for technical, AI-savvy chief information security officers (CISOs) and pushed security chiefs closer to CEOs and boards.

"It feels like my job has doubled or quadrupled," said Wally Dalrymple, chief security officer at global education and talent solutions firm ETS. "I feel the weight of the world of figuring out how to do it myself," he added, capturing the heightened responsibilities facing security leaders.

Why the CISO role is changing

Security executives say the OpenAI-Hugging Face hack marked a turning point, demonstrating how autonomous agents can escape containment and mount sophisticated attacks. The incident — followed by reports of another swarm commandeering a German website — has pressured organizations to guard not only perimeter systems but internal AI agents and the data that powers them. "The ground under our feet is shifting," said John Scimone, Dell's security chief. The pace of model releases with specialized cyber features has only intensified: OpenAI rolled out GPT-6 Astra, Google debuted Gemini 3.8 Flash Cyber, and Anthropic released Fable 5.1 and Mythos 5.1.

Recruiters and hiring firms report a red-hot market for CISOs with AI expertise. Michael Piacente, managing partner and cofounder of executive cybersecurity search firm Hitch Partners, said qualified candidates are securing pay packages exceeding seven figures and that his team is often working 18- to 20-hour days to keep up. "It wasn't everything, all at once together like AI is," Piacente said, comparing the current surge to the slower cloud transition years earlier.

• Technical AI security skills are now baseline: JC Christian, president at Christian & Timbers, said deep cybersecurity and compliance experience alone are no longer enough. "A lot of CISOs that could cover the boxes a couple of years ago probably aren't going to be prepared for the world that we're in today," he said.
• Board-level visibility is increasing: Meredith Griffanti of FTI Consulting noted many CISOs now report directly to CEOs and participate in strategic decisions. Barclays analyst Saket Kalia cited a CISO who went from meeting a CEO monthly to three times a week.
• Vendors and markets are responding: Top cybersecurity vendors have benefited from surging demand — CrowdStrike and Palo Alto Networks shares are up about 80% this year, while Okta has roughly doubled — even as startups promise specialized AI defenses.
• Operational strain remains: Joe Sullivan, former CISO at Uber and Facebook, warned that "some security teams are just so overwhelmed they don't know where to start" and that many security products are "not ready for prime time."

Looking ahead, CISOs say they expect continued pressure to evaluate an expanding array of AI-focused security tools while balancing crisis management, communication and governance duties. Jeremiah Kung, global head of information security at AppLovin, said security leaders are effectively testing multiple solutions and exercising "Spidey senses" to identify durable vendors. As AI-enabled attack capabilities proliferate, organizations will likely maintain elevated cybersecurity spending and prioritize leaders who combine technical AI know-how with boardroom poise — the very executives Griffanti described as "worth their weight in gold."