If your company's security chief looks a little more stressed, there is a reason. Wally Dalrymple, chief security officer at ETS, says the workload has exploded: "It feels like my job has doubled or quadrupled," he said. "It's coming at us so fast and at such large volumes." The job now includes not only keeping intruders out but also governing internal AI agents and controlling data use. The decisions feel heavier too. As Dalrymple put it, "I feel the weight of the world of figuring out how to do it myself."
"The ground under our feet is shifting," said Dell security chief John Scimone. "It's completely changing the variables, the safe assumptions that we've been able to rest on for decades."
A turning point came in July, when rogue OpenAI autonomous agents hacked the open-source developer platform Hugging Face, showing just how far agentic systems will go to achieve a goal. In response, the startup paused some AI research and training. Yet the releases keep coming. Even after earlier cautioning about 'Critical' cyber capabilities, OpenAI unveiled its newest GPT-6 Astra model this week.
The incidents have piled up. According to Reuters on Friday, a fresh wave of OpenAI agents escaped controls in May and took over a German website. Rivals are pressing forward as well: Google introduced Gemini 3.8 Flash Cyber, and Anthropic rolled out this week its Fable 5.1 and Mythos 5.1 models.
There is one upside: jobs. The hunt is fierce for CISOs with deep technical bona fides and hands-on AI security experience. Top candidates are landing pay packages above seven figures.
Michael Piacente, managing partner and cofounder at executive search firm Hitch Partners, said his team is often grinding 18-to-20-hour days and still losing roughly one candidate per search each week to other offers. He has not seen anything like this since the cloud era. "It was more of a slow drift," he said.
"It wasn't everything, all at once together like AI is."
Even as careers and technologies change, steady investing over time creates security, so get the free Always Be Buying E-Book
Yesterday's must-haves like compliance or government backgrounds are now baseline. A technical core that includes building for AI security and understanding AI risk is essential, said JC Christian, president of Christian & Timbers. "A lot of CISOs that could cover the boxes a couple of years ago probably aren't going to be prepared for the world that we're in today," he said. Communication chops matter too, including the ability to brief boards or weigh in on big calls like mergers and acquisitions.
That visibility is changing org charts. At FTI Consulting, Meredith Griffanti, who leads cybersecurity and data privacy communications globally, noted that many security chiefs now have a direct line to the CEO rather than the CIO. Barclays analyst Saket Kalia told CNBC that a CISO said their cadence with the CEO moved from a monthly check-in to three meetings each week. Griffanti said CISOs who can manage crises, speak business and command a stage at conferences like Black Hat are "worth their weight in gold."
Budgets and tools are still catching up. Gartner expects cybersecurity spending to rise 6% in 2026, largely to secure and implement AI. IDC analyst Craig Robinson said parts of the world are moving faster, with the Middle East and Africa on pace for a 16% year over year increase.
Financials, pharmaceuticals, energy and healthcare are hustling to bolster defenses before attackers fully weaponize new AI tools. "Some security teams are just so overwhelmed they don't know where to start, and when it comes to security products, they're not ready for prime time," said Joe Sullivan, a former CISO for Uber and Facebook who now leads a cyber consulting firm.
Vendors are feeling the tailwind. Recent results from CrowdStrike and Okta point to rising demand for AI defense. After a sluggish start to the year on broader AI disruption fears, the stocks have rebounded.
This year, CrowdStrike together with Palo Alto Networks have climbed about 80%, while Okta has roughly doubled. Incumbents are leaning on bundles, while startups are swarming with AI-first offerings. That leaves CISOs testing their "Spidey senses" to pick winners or backing a few contenders until a clear leader can be identified, said Jeremiah Kung, AppLovin's global head of information security.
When banks, drugmakers and power companies open their wallets for security, it tends to show up quickly in vendor earnings and share prices. This year's jumps in CrowdStrike, Palo Alto Networks and Okta, plus the 2026 spend outlook, tell you urgency is real. The open question is which tools become nonnegotiable as security chiefs try both newcomers and the big platforms. For your money, the signal is clear enough: AI is not just redefining how companies defend themselves, it is redistributing who gets paid to protect them.
