Is CISO higher than CTO?

Could you clarify for me the roles and responsibilities of both the Chief Information Security Officer (CISO) and the Chief Technology Officer (CTO) in an organization? I'm curious to understand if one position inherently holds a higher rank or status than the other, or if it varies depending on the company's structure and priorities. Specifically, how do their areas of expertise and influence compare, and what factors might determine whether a CISO is considered to be "higher" than a CTO?