Not trying to diminish it's role or value, but wouldn't security be kinda looked as a cost center as well?

That’s a really good point as it relates to costs between security and ops. My hunch would be downtime is your own business, but data and financial loss is everyone’s (either through liability, legislation, or insurance costs).