Absolutely. I recently moved from a company that viewed IT and information security as cost centers to one that views them as core business components, and the culture (and competence) difference is very refreshing.