CISA jobs in 2026 — demand, top roles hiring, and related skills

As of 2026-09-30, CISA appears in 347 job postings indexed by Skillenai over the past 90 days — Security Engineer has the most postings mentioning CISA, with demand share up 13.0% vs the prior 4 weeks.

Last updated · 90d ending 2026-09-30

Postings · last 90 days
347
Demand vs prior month
up 13.0% vs the prior 4 weeks
Top role · 8.6% of skill postings
Top hiring metro
Seoul

Which roles want CISA?

Upload your resume and Skillenai will show which roles your CISA experience fits, which skills you already cover, and what is missing.

Prepare to discuss CISA in your interview

We’re building mock interviews informed by job postings and career profiles, to help you explain how you’ve used CISA.

Join the mock interview waitlist →AI or human interviews. Coming soon.

Frequently asked questions about CISA

+Is CISA in demand in 2026?

Yes. CISA appears in 347 job postings indexed by Skillenai over the 90 days ending 2026-09-30. Security Engineer accounts for the most postings mentioning CISA (8.6% of all postings mentioning CISA).

+What jobs require CISA?

According to the Skillenai jobs index over the 90 days ending 2026-09-30, among roles with at least 20 postings, the highest shares mentioning CISA are Vulnerability Management Engineer (30.8% of that role’s postings mention CISA), Cybersecurity Advisor (29.6% of that role’s postings mention CISA), Compliance Program Manager (17.9% of that role’s postings mention CISA).

+What skills are commonly paired with CISA?

Across job postings indexed by Skillenai (90 days ending 2026-09-30), CISA most often appears alongside CISSP, CISM, ISO 27001, CRISC, NIST.

+Where is CISA most in demand?

As of 2026-09-30, the metro areas posting the most jobs requiring CISA are Seoul, Madrid, Singapore, Toronto, Dublin, according to the Skillenai jobs index.

+How can I keep up with new CISA content and jobs?

Skillenai indexes news, blog posts, and research papers mentioning CISA alongside the jobs index. You can subscribe to a daily email digest of new CISA content from your Skillenai account.

+Which skills come before and after CISA?

The skill-flow chart shows skills documented in adjacent positions across observed employer changes. An outgoing skill is documented in the following position but not the preceding one. These are ideas to explore, not proven prerequisites, acquisition dates, or levels of mastery. Each ribbon counts employer moves with that skill pair; one move can contribute several pairs.

Weekly indexed postings requiring CISA — last 90 days

Salary distribution

Box = 25th–75th percentile · tick = median · whisker = 10th–90th · USD, annualized

Career paths around CISA

Skills documented before and after this skill across employer changes.

Historical career profiles · all locations

Skills before CISA

Before CISAKnowBe4 → CISA: 1 observed employer moves with this skill pairNIST → CISA: 1 observed employer moves with this skill pairrisk assessments → CISA: 1 observed employer moves with this skill pairAzure VPN → CISA: 1 observed employer moves with this skill pairsystem certification → CISA: 1 observed employer moves with this skill pairmitigation → CISA: 1 observed employer moves with this skill pairInformation security standards → CISA: 1 observed employer moves with this skill pairCISAKnowBe4: 1 movesKnowBe41 movesNIST: 1 movesNIST1 movesrisk assessments: 1 movesrisk assessments1 movesAzure VPN: 1 movesAzure VPN1 movessystem certification: 1 movessystemcertification1 movesmitigation: 1 movesmitigation1 movesInformation security standards: 1 movesInformationsecurity standards1 moves

Skills after CISA

After CISACISA → SOC 2: 1 observed employer moves with this skill pairCISA → security technologies: 1 observed employer moves with this skill pairCISA → security assessments: 1 observed employer moves with this skill pairCISA → NIST: 1 observed employer moves with this skill pairCISA → security incidents: 1 observed employer moves with this skill pairCISA → incident response activities: 1 observed employer moves with this skill pairCISA → security awareness training program: 1 observed employer moves with this skill pairCISA → security tools: 1 observed employer moves with this skill pairCISASOC 2: 1 movesSOC 21 movessecurity technologies: 1 movessecuritytechnologies1 movessecurity assessments: 1 movessecurityassessments1 movesNIST: 1 movesNIST1 movessecurity incidents: 1 movessecurity incidents1 movesincident response activities: 1 movesincident responseactivities1 movessecurity awareness training program: 1 movessecurity awarenesstraining program1 movessecurity tools: 1 movessecurity tools1 moves
How to read this chart · view counts

Each side is an independent set of observed employer moves, not the same people followed through three stages. Ribbon widths compare move counts within that side. Internal moves are not included.

The following position documents a skill that the preceding position does not. Skills must be linked to both positions, with clear dates and no overlap. One move can connect several skill pairs. These patterns suggest skills to explore; they do not establish prerequisites, when a skill was learned, or a higher skill level.

Source: Skillenai talent graph, historical career profiles. Historical descriptions and coverage can change. Only the leading published connections are shown.

Observed connections and move counts
ConnectionMoves
Before: KnowBe41
Before: NIST1
Before: risk assessments1
Before: Azure VPN1
Before: system certification1
Before: mitigation1
Before: Information security standards1
After: SOC 21
After: security technologies1
After: security assessments1
After: NIST1
After: security incidents1
After: incident response activities1
After: security awareness training program1
After: security tools1

Roles most likely to require CISA

Among roles with at least 20 postings in the same period.

RolePostings mentioning skill% of role postings mentioning skill
Vulnerability Management Engineer830.8%
Cybersecurity Advisor829.6%
Compliance Program Manager517.9%
Information Security Architect417.4%
Information Security Consultant514.3%
Chief Information Security Officer711.7%
Information System Security Engineer210.0%
Business Information Security Officer28.7%
Head of Information Security28.3%
Information Security Director37.5%

Roles with the most CISA postings

RolePostings mentioning skillShare of skill postings
Security Engineer308.6%
Security Analyst123.5%
Cybersecurity Advisor82.3%
Vulnerability Management Engineer82.3%
Chief Information Security Officer72.0%
Information Security Analyst72.0%
Program Manager72.0%
Cloud Information System Security Engineer61.7%
Cyber Security Analyst61.7%
Cybersecurity Consultant61.7%

Top companies posting jobs requiring CISA

Employers ranked by indexed job postings in the last 90 days.

Top companies posting jobs requiring CISA
CompanyPostings · 90 days
Mozilla11
Chainguard8
Optiv7
Zscaler6
MANTECH6
Allianz5
Lucid5
Coupanginternal5
Coupang5
Pfizer5

Job postings indexed over the past 90 days, grouped by resolved employer. Counts are postings, not hires. Companies without a published page appear without a link.

Top metros hiring for CISA

NamePostingsShare
Seoul113.2%
Madrid92.6%
Singapore82.3%
Toronto82.3%
Dublin72.0%
New York City72.0%
Tokyo72.0%
Boston51.4%
Bengaluru41.2%

Skills commonly paired with CISA

Get a daily email digest of new CISA content

Skillenai indexes news articles, blog posts, and research papers that mention CISA. Click below and we'll open a pre-filled daily digest — change the cadence to hourly or weekly if you prefer, then save. Free account required (~30 seconds).

Explore related pages

How this was computed

Counts derive from the Skillenai jobs index over the 90 days ending 2026-09-30. Skills are resolved against the Skillenai canonical taxonomy, so the same entity is counted whether a posting writes 'Python', 'Python 3', or 'python'. Role prevalence divides postings mentioning CISA by all postings for each role in the same window, ranking roles with at least 20 postings. Role distribution divides each role’s CISA postings by all CISA postings, including postings without a role. Shares need not sum to 100% for the displayed roles. Pages refresh weekly (or daily for the top-50 most-requested skills). Adjusted posting share: 0.1% to 0.1%. Demand share change is the relative percentage change between these adjusted shares. Each employer-and-ATS group has at least 10 postings in each 90-day window; its earlier posting count supplies the same weight in both windows. The panel includes 2,595 identified employers and covers 68% of earlier and 72% of latest indexed postings. Windows: 2026-06-02 to 2026-08-31 and 2026-06-30 to 2026-09-28 (UTC; end dates excluded). The windows overlap by 62 days. Dates reflect indexing, not the employer’s posting date. This measures posting mix, not total hiring or market-wide demand. Matching excludes entrants and exits; changes in crawl completeness within an employer or ATS can still affect the result.

source
Skillenai jobs index, deduplicated daily
entity_id
583e9f0815d84def
data_as_of
2026-09-30
window_days
90
Hiring engineers who use CISA?

The demand, skills, and geo numbers on this page come from the same Skillenai labor market index that powers our API. Use it for compensation benchmarking, hiring-competition analysis, and skill-adoption tracking.

Skillenai for recruiters →
Compiled by Jared Rand · Data sourced from the Skillenai labor market index