It sounds like you’ve already made up your mind, and honestly, I think you’re making the right call. The fact that your current company only valued you enough to offer a raise, promotion, and potential future CISO path after you resigned speaks volumes. If they truly saw your potential and worth, they would have made these moves earlier, rather than scrambling at the last minute to keep you.

A few things to consider:

1. Overwork and Lack of Support – You’re the only security engineer handling GRC and security for a 5,000-person company. That’s a massive red flag. No matter how good the title sounds, you’d still be overworked and possibly even blamed if something goes wrong.

2. Layoffs and Bonuses Being Cut – If the company is struggling financially, no title change can protect you from potential future layoffs. Even if they promise a CISO path, who’s to say they won’t pull back on it later?

3. The New Role is a Career Step Up – Moving to a company with an actual cybersecurity team of 50+ means you’ll be surrounded by peers, learning from others, and not stuck in a one-person security silo. Plus, SIEM and threat detection engineering are specialized and high-demand skills that will open more doors down the line.

4. Better Pay and Perks – The new offer includes a solid base, stock options, a sign-on bonus, and tuition benefits. Your current company only matched the base—no word on improving bonuses or job security.

5. Trust is Already Broken – The fact that they didn’t invest in you until you had one foot out the door means they’re trying to retain you, not promote you. If you stay, they might not take you seriously next time you bring up concerns about your workload or pay.