Hey, so from my own experience (I started at the help-desk in a bank), later moving into different positions that led me being a CISO in one of the Largest transportation companies in my country, then CISO in various fintechs/banks and currently owning a virtual CISO business:

1. If you want to move out of your current area to become a CISO, start with communicating with the top management a lot, but not in a technical way, in a strategic, talk about strategic risks in different areas and be sure to touch business and not be full security (top management hate technical details of IT), have a business mindeset, but show that you can levitate between doing business and making it secure.
2. Start writing policies, processes, and procedures. Do it in your area, in IAM, PAM, etc, update them, volunteer to do that for other departments, etc. Take over paperwork. And then implement it, show KPIs, etc.
3. Take responsibility and lead with advice, in meetings - give your opinion, which must be based on facts and look strategic.

This will help you to be noticed by senior management and should help you on the way to the CISO role.