Security Engineers / CSOs: what are your biggest frustrations at work RN?

As a security engineer/lead/CSO, are there any hard-to-change things that you feel could be affecting your org's security posture? If there are, which ones do you have the biggest issues with? (e.g. management not procuring the tools/services you recommend, difficulty getting people to stop using their birthdays or pet names for passwords :(, difficulty updating mission-critical software when they're outdated, etc).

If you feel your security posture's fine, are there any other elements about your day-to-day work that you wish could improve? Help me; I'm looking for a worthwhile problem to solve.