What most directors do
They treat legal and security as blockers. They escalate. They work around. They accept "we'll revisit this later" as the answer. Later never comes.
When security asks "how do we know this is safe?" most directors answer with theoretical promises. That does not build trust. It creates more questions.
What works instead
Address concerns with specificity. Build relationships with compliance before you need them. Document your approach so thoroughly that legal can actually review it. Have metrics showing governance enabled speed.
The 18-month relationship
Directors who can demonstrate they navigated these conversations successfully — who can show they built trust with legal and security over 18 months — those are the directors who get VP offers.
That 18-month relationship does not exist yet for most directors. It needs to start now. Not when you are ready to move fast. Before you are ready to move fast.
The proof
"Security review takes 6 weeks on average." → "We built governance frameworks that got security review to 8 days without compromising quality." That is the VP story.