The way the role of CISO is currently structured does not set the CISO, nor the organization, up for success.