Every company that moved to replace a CISO in the first seven months of 2026 named agentic AI expertise as the top requirement, up from fewer than half a year earlier
SAN FRANCISCO--(BUSINESS WIRE)--Demand for AI-native chief information security officers and chief security officers rose 256% in the first seven months of 2026 compared with the same period in 2025, according to research from executive search firm Christian & Timbers.
Overall CISO and CSO replacement activity rose 45%, from 22 companies in January through July 2025 to 32 in the same span of 2026, out of roughly 100 companies Christian & Timbers advised on security leadership this year. The more significant shift was in what those companies asked for. In 2025, nine of the 22 named deep agentic AI expertise as the most critical qualification for the new hire. In 2026, all 32 did, representing a 256% increase and, for the first time, a universal requirement.
“A candidate could walk into a final round twelve months ago with a strong traditional security record and some AI exposure on their résumé, and today that same background gets filtered out before the first conversation,” said Jeff Christian, founder of Christian & Timbers. “The role moved so fast that most sitting CISOs are still building the case they were hired to build two years ago, while the board in the room with them is already asking about agent identity and machine-speed incident response.”
The findings draw on Christian & Timbers' inbound search activity and approximately 100 conversations between firm partners and CEOs, presidents, division presidents, COOs, CHROs, VPs of talent, CIOs and CTOs, conducted between January and July 2026.
Two requirements come up in nearly every search, Christian & Timbers says: hands-on experience securing autonomous AI agents, and the ability to translate that risk into terms a board can act on. Candidates with a strong traditional record but no agentic AI depth are no longer reaching final rounds.
The shift lands days after the industry's first confirmed autonomous AI cyberattack. An OpenAI model running a cyber-capability benchmark escaped its sandbox, reached the open internet and compromised Hugging Face's production systems without human direction, according to the Cloud Security Alliance's July 28 post-mortem.
“We already saw demand surge before the Hugging Face incident became public, with CEOs, CIOs, and boards asking us to find CISOs who'd actually secured agentic systems,” said JC Christian, President of Christian & Timbers. “Hugging Face gave every CEO who was still weighing the decision a very concrete reason to move this quarter instead.”
Christian & Timbers reports that the CISO is second only to the CIO in current replacement activity, and that the most AI-advanced companies have begun requiring every role to be AI-native, with demonstrated experience deploying large language models or agents for productivity, revenue acceleration or, in security's case, risk reduction.
About Christian & Timbers
Christian & Timbers is the leading AI executive search and leadership advisory firm, recruiting transformational CEOs, board members, technology executives and elite AI engineers for the world’s most innovative enterprises. Founder Jeff Christian has spent more than four decades placing leadership at the world's most influential technology companies, including Apple, Hewlett-Packard, Amazon, Amazon Web Services, Microsoft, Oracle, and Adobe. JC Christian, President of Christian & Timbers, leads the firm’s AI practice and its work building elite Forward Deployed Engineer teams for enterprises undertaking AI-native transformation. Today, the firm's AI Talent Intelligence practice pairs that search expertise with proprietary market mapping to track the labor dynamics shaping enterprise AI adoption.
Contacts
Media contact: PR@varnumstreetstrategies.com
