That potential exodus comes as almost 3 million cybersecurity jobs remain unfilled globally. Another recent study found that chief information security officers average just 18 to 24 months on the job, with burnout a key factor, versus 6.2 years for chief financial officers and 8.4 years for chief executive officers.