> for a lot of jobs in security it's pretty hard to measure how well it's being done

Nothing going wrong: “What are we paying you for?”

Everything going wrong: “What are we paying you for?”

It’s a no-win situation unless you manage to score a division manager who understands security and understands the reports a good security division produces. And most importantly, understands that no news is good news.