@jerry I'd say technical enough that your technical folks underneath you couldn't blind you with details, yet business-savvy enough to participate in CxO meetings and to both explain your division in human terms yet still fight for and get your needed budget.

This is my view from the sidelines, never been a CISO, never want to be one.