Not The Onion: Equifax's "chief security officer" majored in Music Composition: https://www.linkedin.com/in/susan-m-93069a/. How did she even get this job?
Yet moreover, corporate security is quite uncool to people who do academic anything (including security) or worked as security researchers. Corporate security is more about negotiation, enforcement, standards compliance and other significantly less interesting things to someone who like research or low level details.
I would like to understand the thought process that resulted in hiring a Music major to run an organization in charge of protecting one of the largest troves of PII in the history of mankind.
Most practicing programmers that are called engineers are not trained in Engineering either. Computer Science is not Engineering.
There was no line of reasoning, only observation. You asked the question, I answered. I assumed you work in different place/industry and your question is honest quest to find how things work.