I think security and compliance work makes engineering teams faster.
Why I think that
I've spent years leading engineering teams through HIPAA, SOC 2, PCI DSS and GDPR. Every time, compliance made us faster, not slower.
When the rules are clear, everyone knows which tools they can use. They don't have to guess. Without that, people don't use the tools at all, because they're not sure they're allowed to. Answer those questions early and the whole team moves quicker.
It's also how a company grows into enterprise customers. They ask the security questions before they sign. If the answers already exist, the deal doesn't stall.
What I do about it
I write the basics down.
The Everyday Security Playbook: Zero Trust, MFA, Shadow AI, in language anyone in the company can use. Most people don't need theory. They need to know what actually keeps them safe.
I help teams set their rules before they need them.
Which AI tools are allowed, what data can go where, who decides. Settled early, in a room, with the people who'll have to live with it, so it never has to be settled in a post-mortem.
I make the case in public.
Panels, events, other people's teams. The questions I get back are how I find out what I've got wrong.