According to SANS, being the CISO/ISO or Director of Security is the 10th coolest infosec job. The top two jobs are:
Once upon a time I did network and web penetration. Here’s a sample exploit on packetstorm.
Sometimes moving up is in fact moving down!