CISM vs CISA
Two certifications compared on what hiring companies write into their open postings: how often each is named, how often both are, what the roles naming each pay and where each is asked for.
Side by side
CISM and CISA in 2,150 open postings
72 postings name both.
Typical salary of the postings naming each: CISM $163k–$315k/yr, CISA $157k–$315k/yr.
Questions
CISM or CISA?
Is the CISM or the CISA asked for more often?
The CISM: 149 open security postings name it against 120 for the CISA, and 72 name both.
Which pays more, the CISM or the CISA?
Postings naming the CISM state a middle salary of $180k/yr, those naming the CISA $170k/yr. Both are asked for most in Governance, Risk & Compliance (GRC) postings, so the gap is small.
Which should I take first?
Both need verified years in the field first, so let the work you want decide. Employers often ask for both: 72 of the 120 postings naming the CISA also name the CISM.
More comparisons: CISSP vs CISM, Security+ vs CySA+, OSCP vs CEH, CISSP vs CCSP, CISA vs CRISC, Security+ vs CEH, CISSP vs CISA.