AI Security Chiefs in High Demand
Demand for AI-native chief information security officers and chief security officers rose 256% in the first seven months of 2026 compared with the same period in 2025, according to research from executive search firm Christian & Timbers.
The research found that every company that moved to replace a CISO in the first seven months of 2026 named agentic AI expertise as the top requirement, up from fewer than half a year earlier.
Overall CISO and CSO replacement activity rose 45%, from 22 companies in January through July 2025 to 32 in the same span of 2026, out of roughly 100 companies Christian & Timbers advised on security leadership this year.
The more significant shift was in what those companies asked for. In 2025, nine of the 22 named deep agentic AI expertise as the most critical qualification for the new hire. In 2026, all 32 did, representing a significant increase and, for the first time, a universal requirement.
Jeff Christian, founder of Christian & Timbers, noted that the role of the CISO has changed significantly, with companies now requiring hands-on experience securing autonomous AI agents and the ability to translate that risk into terms a board can act on.
Two key requirements come up in nearly every search, Christian & Timbers says: hands-on experience securing autonomous AI agents, and the ability to translate that risk into terms a board can act on. Candidates with a strong traditional record but no agentic AI depth are no longer reaching final rounds.
Related: UK tightens rules on buy-now-pay-later services
The shift lands days after the industry’s first confirmed autonomous AI cyberattack, which was reported by the Cloud Security Alliance on July 28.
JC Christian, President of Christian & Timbers, said that the demand for AI-native CISOs surged before the Hugging Face incident became public, with CEOs, CIOs, and boards asking the firm to find CISOs who’d actually secured agentic systems.
The findings draw on Christian & Timbers’ inbound search activity and approximately 100 conversations between firm partners and CEOs, presidents, division presidents, COOs, CHROs, VPs of talent, CIOs and CTOs, conducted between January and July 2026.
In practice, this shift means that companies are now looking for CISOs who can not only secure traditional systems but also handle the complex risks associated with autonomous AI agents. This requires a deep understanding of AI technology and its potential vulnerabilities, as well as the ability to communicate effectively with boards and other stakeholders, including explaining how AI errors can impact security.
Christian & Timbers reports that the CISO is second only to the CIO in current replacement activity, and that the most AI-advanced companies have begun requiring every role to be AI-native, with demonstrated experience deploying large language models or agents for productivity, revenue acceleration or, in security’s case, risk reduction.
They are seeking leaders who can make informed decisions about AI adoption and implementation.
