Who Cares About Security in a Company?

The question is, who cares about security in a company these days? It used to be the CISO. Security was more of an IT function, not really a DevOps function. Now you have things called DevSecOps. And so I understand where it came from and I think where it's going.