CISM is designed for information security managers, the certification emphasizes the relationship between information security and the business. It focused more on management and strategy, and only covers technical topics in a limited way.
CISSP certification, is suitable for a variety of positions, from security managers to consultants. The certification focuses on the operations side of information security and threat response, the tactical aspects of security operations and goes much deeper into those areas.