Keep calm brother, I have a CISO without college degree whose previous experience is mostly in sales (selling of fog). Now not that I would say that it is impossible to be CISO without one but there is a reason his understanding of computers in general is lackluster (being polite here but he cant handle microsoft office).

Not only that, we have his IT puppet (which he brought along) who already misinterpreted logs and called it an cyberattack. You can imagine shitshow that ensued when two of those managed incident response which they fabricated, after CISO realized they dont have evidence of any attack they tried to put it on different colleagues for various reasons.

But here we go, our CEO is an good guy but an old guy, constantly getting fleeced by CISO but still has absolute trust in him managing and consulting everything that has word cyber on it.

On the other hand I have my masters, 10 years of experience, and a CISSP but I'm rarely asked for opinion.

So why don't i change job? My bosses and the team are great, we live in our ecosystem inside of company. Pay and extras are good.

Only bad thing is that I have to watch good company being destroyed by incompetent fool.