The CIO is personally a nice guy but is way out of his depth. The Dunning-Kreuger effect is definitely in play. In his time at the company there have been approximately 7 re-orgs in IT. None of them resolve the issues that IT is struggling with (i.e. Deteriorating skill sets, over-reliance on contractors, failing processes, and completely ignoring IT best practices (in fact I have heard it said that if you want to pass an exam like CISSP, CISM or PMP just answer the opposite of what PGE does and you'll make it)). To make matter worse he had imported all the worst management practices from GE (stack ranking) and combined them with whatever fad was in vogue 5 to 10 years ago in Silicon Valley to make PGE's own special version of management hell.
Unfortunately this attitude persists downward, especially in the cybersecurity arena where mitigation of risk is secondary to producing metrics that make it look like you mitigated risk. There is no accountability for managers no matter how incompetent. This place is one bad decision away from a total meltdown
Oh, and if you are a current employee forget promotion. They will post jobs in your area at a higher pay level and you won't be considered for them. They will just hire someone from outside and you will sit in your same paygrade for years with no upwards mobility. They do occasionally promote someone to manager but it basically requires the hand of god to reach down and touch you.
