So you want to be a CISO? Make sure you know what the top role involves - and what it doesn't, says Paul Simmonds