The expanding CISO role: From security operator to enterprise risk strategist

The expanding CISO role: From security operator to enterprise risk strategist

The CISO job has outgrown its old definition. What started as a technical role has become a test of strategy, stamina, and leadership — and the scope keeps widening. According to Foundry’s 2025 Security Priorities Study, a majority of security leaders say their roles have expanded in the past year, and more than half now brief their boards multiple times a month. The CISO’s reach has extended well beyond cybersecurity operations to encompass ent…