What happens when infosec is an afterthought, brought to you by management, almost always by management. Most of my gigs throughout my career have been because of this (infosec guy).
The rest of my career has been when management is throwing money at the problem(s), usually right after an incident. Sometimes you get lucky and it’s in response to some other entities incident.
Last minute improbable solutions to other people’s long term impossible problems.
Pimpin’ ain’t easy …