Everything's fine until it's not - Systems Engineer Availity Employee Review

Senior management talks about breaking down walls/bureaucracy, but that is mostly just talk. Over the last few years, it feels like Senior Mgmt has lost touch with the workers. Don't start questioning why certain policies are in place, as it relates to HiTrust & Hipaa, or suggest they need to be changed. Start talking about changing policies, and everyone comes out saying they can't be changed because of one of those two. So decisions on policies made years ago are still in place and staff go through hoops to provide the evidence for these on a yearly basis, when they make absolutely no sense anymore. There doesn't seem to be any definitive planning on company wide projects - the goals/vision/northstar are platitudes and guides only. This manifests itself in ADHD by management on what's important "at this time" and constantly pivoting every few months. The CISO is the worst offender, never wants to plan, just constantly wanting to work on pet projects, or whatever he wants at that time. The worst is that it appears that if you get on the CISO's bad side, or wants you gone, he has no problems using PIPs & finding "evidence" to support terminating you. Seen it happen to multiple people over the last few years. He's great at managing up, but it does feel like he's a bully to his subordinates & others. Being in IT (non-development), it's hard to connect the dots of what you're working on to the company's goals/vision/northstar. Middle Management has a really hard time to connect those dots & explain it. There's a vacuum of leadership on the IT side that starts with the CTO. I've seen & heard where his direct reports tell him things, and he doesn't respond, or he won't make a decision unless pressed by multiple people.