Have you worked for a manager or ciso that didn't have a security background?

Everyone needs their start somewhere, I'm thankful for the chances I was given early on, but our ciso's lack of formal security experience is starting to hurt the team as a whole. Managing skills aside (sorry, intentionally keeping details light here), project planning, organization, tool selection, and decision making, etc. seem to be done with an engineering mindset instead of a more methodical risk-based one. Projects important to the rest of the senior-level ICs are in limbo, backlog is growing, …

ciso cybersecurity decision decision making engineering etc experience making manager mindset organization planning project projects risk security skills start team thankful tool