Large Enterprises Appoint AI Security Leaders as Board Oversight Lags
Nearly two-thirds of major companies have assigned a head of AI security, but board-level oversight of artificial intelligence remains rare.
- By Jesse Jacobs
- Oct 21, 2026
A cybersecurity industry study reveals that large enterprises are rapidly establishing a new executive role—head of artificial intelligence security—even as board-level governance over the technology falls behind.
According to research from IANS and Artico Search, 65% of companies with annual revenues exceeding $10B have designated a head of AI security. Among these organizations, 18% created a standalone position while 47% combined the responsibility with an existing leadership role.
In contrast, dedicated AI security positions remain uncommon at mid-sized and smaller firms. Only 6% of companies generating under $1B and 9% of those earning between $1B and $10B have established dedicated positions. At smaller organizations, these duties are generally assigned to existing leads in governance, risk and compliance or security operations.
Despite the rise of AI security leaders, enterprise-wide oversight remains fragmented. Only 7% of Chief Information Security Officers at $10B-plus organizations hold primary accountability for general AI governance, with the duty most frequently falling to a Chief AI Officer. Between 14% and 19% of organizations across all revenue tiers report having no single executive accountable for enterprise AI governance.
Oversight at the board level lags further behind operational management. Just 21% of companies earning over $10B have implemented a dedicated board committee for AI ethics or responsible AI. Between 43% and 48% of surveyed companies report having no plans to establish such a committee.
The research also highlighted structural and compensation trends across security teams:
- Executive Succession: While 58% of $10B-plus organizations employ a deputy CISO, companies frequently recruit external candidates rather than promote internally when filling a CISO vacancy.
- Compensation Drivers: Experience in information security serves as the single largest factor in determining salary levels, outweighing company size, geographical region and reporting structure.
- Large Enterprise Premiums: Full-time deputy CISOs at the largest organizations average approximately $350,000 in annual cash compensation, with top earners exceeding $500,000. Overall compensation at mid-sized firms runs 16% to 26% lower than at $10B-plus enterprises.
The findings are detailed in the 2026 Security Organizational Design Benchmark Report, which compiled data from more than 1,400 cybersecurity leaders and staff members.