Shifting from traditional security to DevSecOps has fundamentally changed how our team handles risk and compliance by embedding security throughout the entire development lifecycle, rather than treating it as a separate, final step. With automation integrated into our CI/CD pipelines, we continuously scan code for vulnerabilities, misconfigurations, and compliance violations during development, ensuring early detection and remediation. This proactive approach reduces the number of issues found at later stages, preventing delays and costly fixes. By making security a shared responsibility across development, security, and operations teams, we have fostered a culture of collaboration and accountability, where security is prioritized from the start. Additionally, automated compliance checks are run as part of our deployment process, ensuring that all releases meet regulatory requirements without slowing down delivery. This shift has significantly reduced the risk of security breaches, improved compliance posture, and increased overall agility while maintaining the security of our systems.