While Gretchen is out, the vestiges of her time are still running rampant. We have all these so-called GRC people who have been placed in positions best filled by technical people or the people you laid-off with technical skills:
IT Project Manager >> Segment Information Security Officer (no security certs or hands on tech skills
Associate Project Manager >> Sr Mgr Info Security Risk (no security certs or hands-on tech skills but he is Offshore in India
Business Analyst >> Senior Information Security Risk Auditor (expired certifications)
Auditor Ernst & Young, India >> Director Info Security Risk Management (no certifications, degree or hands-on technical skills)
Accounts Receivable Accountant >> Director Information Risk Management (no certifications or hands-on technical skills)
Risk Assurance Associate >> VP IT Security - Information Risk Governance (expired CPA and no hands-on technical skills)
The list goes on and on and on. The people who succeed as not those with the skills, training or education. They are mostly unqualified men who leaders would rather hire and promote than qualified women.