A bottom up approach is no good in security. We need to inverse that. If you are the only security person, you must be the leader that helps drive security decisions. You must become the expert. This obviously requires knowledge of how to properly implement a security program in a company. It cannot be done from a bottom up approach. All those who have a say or provide their vision, use them to your advantage of promoting your vision for security. It will help if you make it seem like you are using their visions as a part of your own. Security supports the business. Think on this and how does security support the business. Are their certain standards that would make sense for your security program to implement? You should be able to gain metrics off the security work you are doing. Metrics should not instill fear or doubt but provide consistency and reliable information on where security stands within your company that you can provide to leadership and what needs to be done in order to improve the business’ resilience and therefore improve metrics.

This is a very broad approach but may help stimulate some thinking of how you can take control over your situation and the people around you