CISSP vs CISM
Two certifications compared on what hiring companies write into their open postings: how often each is named, how often both are, what the roles naming each pay and where each is asked for.
Side by side
CISSP and CISM in 2,150 open postings
145 postings name both.
Typical salary of the postings naming each: CISSP $160k–$300k/yr, CISM $163k–$315k/yr.
Questions
CISSP or CISM?
Is the CISSP or the CISM asked for more often?
The CISSP: 360 open security postings name it against 149 for the CISM, and 145 name both.
Which pays more, the CISSP or the CISM?
Postings naming the CISSP state a middle salary of $188k/yr, those naming the CISM $180k/yr. Both are asked for most in Governance, Risk & Compliance (GRC) postings, so the gap is small.
Which should I take first?
Both need verified years in the field first, so let the work you want decide. Employers often ask for both: 145 of the 149 postings naming the CISM also name the CISSP.
More comparisons: Security+ vs CySA+, OSCP vs CEH, CISM vs CISA, CISSP vs CCSP, CISA vs CRISC, Security+ vs CEH, CISSP vs CISA.