Just left a chat with a dozen finance leaders and all of them are making budget for more security people and tooling.
Several of them (including $100M+ ARR companies) didn't even have a dedicated security person. IT team ran it.
Better late than never...