At the same level, development always pays better. I had the fortune to be promoted from senior developer to CISO when the area was formally opened at a small company.

To be honest, I feel the change came before I felt proficient at web development, but I'm happy because I was always complaining about unsafe practices, and now I get to write the policies.