Senior path
Security Leadership
Own the programme: governance, risk, budget and the argument you make to executives and auditors.
What the work involves
- Set and defend a risk position
- Build and run the security programme
- Manage third-party and regulatory obligations
- Report to executives and auditors
Core competencies
iSecPath tracks these competencies individually as you learn, so your roadmap shows the gap rather than a single overall score.
Certification mapping
iSecPath Recommended PathThis sequence reflects iSecPath's learning-path logic. It is not a set of official prerequisites — "Prerequisite" appears only where the certification provider authoritatively requires it.
ISC2 Certified Information Systems Security Professional (CISSP)
Required exam: CISSP
Breadth across all eight domains, expected in many lead roles.
iSecPath recommends this step in this path. Not a provider requirement.
ISACA Certified Information Security Manager (CISM)
Required exam: CISM
Management-first framing of governance, risk and programme work.
iSecPath recommends this step in this path. Not a provider requirement.
CompTIA Security+
Required exam: SY0-701
Useful baseline if you are arriving from a non-technical management background.
Adds adjacent depth alongside the main sequence.
iSecPath sells learning access only. The external certification exam, exam registration, exam fee and the provider's eligibility requirements are separate and are not included. Purchasing iSecPath does not grant a certification.