Companies that operate in heavily regulated industries oftentimes run into conflicting directives around tactical decisions that need to be made, potentially hindering overall security posture in order to meet regulatory requirements. This talk will explore strategies that security teams and leaders can use to navigate the murky waters of bureaucracy, compliance, and politics to achieve the security goals they're striving for. Throughout this talk I will pull from examples in my own career that span some of the largest industries in the US.