Metrics and ROI That Matters in 2020 and Beyond
If enterprise security continues to mature as a business function, in most enterprises, senior management will ask for a set of metrics to measure performance.
Why spend time, resources and money on your enterprise security program if you can’t determine whether it’s working or not? It’s just as important to establish the right metrics for a security program as it is to have such a program in place.
One of those metrics is salary and compensation. According to Jerry Brennan, founder and Chief Operating Officer of Security Management Resources (SMR Group), “The most common question asked by candidates when they are considering a new position is “What does the compensation look like?’”
We are partnering with The Foushée Group, a leading compensation research company that has produced the annual Security & Compliance Compensation Survey for 18 years. The survey is designed to provide accurate and timely compensation information on 78 security and compliance positions to companies who seek to market price their positions to the national market. The survey input is not based on self-reporting, rather the survey questionnaire is sent to Human Resources professionals, who review the provided job descriptions and match their jobs to the survey position descriptions. All data reported is aligned with the Department of Justice Safe Harbor Guidelines for reporting compensation information. No individual company data is identifiable, and the data is reported in weighted averages, median, percentile distributions and other pertinent data. Participating companies range in revenue size from less than $500 million to more than $150 billion.
Compensation surveys are a snapshot in time, reflecting the data at the date of the information. We asked the Foushée Group to provide some trend data from the 2019 survey. Here are five enterprise security positions from the 2019 survey data:
- Top Global Security Executive (Chief Security Officer)
- Director, Computer, Network & Information Security
- Manager, Corporate Investigations
- Senior Regional Manager Domestic Security;
- Manager, Protective Forces Armed
In addition, The Foushée Group pulled data from the published 2014 survey and compared data points to the published 2019 survey for the same positions. All data points (weighted average, aggregate) include base salary, total compensation (base plus bonus) and annual Long-Term Incentive (LTI) target.
Top Global Security Executive (Chief Security Officer)
When comparing reported data from the 2014 survey to the 2019 survey, the CSO positions base pay weighted average in the aggregate increased by 9.4 percent over the reporting period to $338,881 annually. Base salary plus bonus increased by 6.3 percent to $434,347 annually. Bonuses are pay at risk and tend to vary based on company an employee performance. Most CSO positons are eligible for a LTI, usually paid in company stock over a set number of years. The LTI annual target decreased by approximately one percent over the reporting period to $152,712 annually.
Director, Computer, Network & Information Security
Comparing data from the 2014 survey to the 2019 survey, the Director, Computer, Network & Information Security base pay weighted average in the aggregate increased by approximately 13 percent to $211,507 annually. Base salary plus bonus increased by 15.6 percent to $252,505, while those positions eligible for LTI, the target increased by 5.6 percent to $70,425.
Manager, Corporate Investigations
Comparing data from the 2014 survey to the 2019 survey, the Manager, Corporate Investigations base pay weighted average in the aggregate increased by approximately 9.7 percent to $144,853 annually. Base salary plus bonus increased by 7.3 percent to $162,327, while those positions eligible for LTI, the target increased by 37.6 percent to $35,725.
Senior Regional Manager Domestic Security
When comparing data from the 2014 survey to the 2019 survey, the Senior Regional Manager Domestic Security base pay weighted average in the aggregate increased by approximately 10.8 percent to $169,196 annually. Base salary plus bonus increased by 10.2 percent to $200,356, while those positions eligible for LTI, the target increased by 12.3 percent to $30,790. This position has the organizations largest geographic region security function reflected by the company’s operations in a particular area, says The Foushée Group.
Manager, Protective Forces Armed
The Manager, Protective Forces Armed base pay weighted average in the aggregate when comparing data form the 2014 survey to the 2019 survey increased 10.6 percent to $125,203 annually. Base salary plus bonus increased by 13.9 percent to $140,556, while most of those surveyed reported the positions ineligible for a LTI Grant.
Based on the data reported, says The Foushée Group, most security positions have increased base pay, bonus and long term incentives as companies try to maintain a competitive market positon. Many factors influence the reporting numbers, such as company participation, ability to pay, compensation philosophy and value of the position to the company.
The Foushée Group suggests that enterprise security leaders should participate in a compensation survey typically housed in their Human Resources group. The first question leadership should ask Human Resources is: “Are my jobs market priced annually?” and if not, why not? "In today’s market," says The Foushée Group, "a company cannot afford not to understand market conditions as it relates to human capital. If your company doesn't, you can bet your competitor does."
The Security & Compliance Survey
The survey solicits data and the competitive practices of 78 management, professional and technical positions) in the security and compliance field. Current security and compliance job families include:
- Classified Materials/Material Controls • Computer & Info. Security
- Console Operator
- Corporate Investigation
- Domestic Security
- Emergency Preparedness
- Executive Protection
- Global Compliance & Ethics Security Programs
- Global Security
- International Security Threat Analysis • Network Security
- Nuclear Accountability
- Physical Security-Unarmed
- Product Security
- Protective Forces-Armed
- Regional/Bus. Unit Security
- Regulatory Compliance
- Security Clearance
- Security Systems & Training
The 2020 survey launched November 13, 2019, and participant input is due to the Foushée Group by January 31, 2020. The report will be published on March 30, 2020. Extensions are available on an individual basis.
According to The Foushée Group, organizations may participate in the survey free of charge, however, there is a fee for the comprehensive survey report, which includes the hard copy and e-version of the report.
For additional information on participating in the 2020 survey and report, please visit www.fousheesurvey.com or contact Steve Walker at 239-282-1929.