IT Security Career Change Mid-Career?

[DBRENNAN118]

So, I finished my BSBA, and am searching for ways to continue to improve myself and my career. So far, the degree on my resume has not helped too much. I know it's been a short time, but I don't think it is going to matter a whole lot at this point in my career and in my field. My background is in retail security/risk management...doesn't sound like a lucrative field but I have actually done pretty well over the last 20 years. Never really needed a degree, but always wanted it - for myself and more recently to set the example for my kids. Well, it seems like my field is sort of drying up and there are not a lot of opportunities at my level (senior director/VP). Retail is terrible in general, and it seems like most job fields are feeling the pain...all except IT Security. Every time I do a job search on Indeed or Linkedin, I see literally hundreds of open positions for CISO, IT Security Director/VP, etc.

Question: if I started studying (basically from scratch) for a degree in IT Security (or IT, Comp Science, etc.) could a guy in his mid-40s find a way to have a successful career in this field? With more than 15 years of director-level and above experience on my resume, how hard would it be to land a quality mid to high level job in the IT Security field within the next 2-5 years?

I of course understand that it 'depends' on a whole bunch of different factors - but assuming I move quickly and am successful in gaining a degree in this field - could I make this change and have success? I don't expect to walk in with no IT leadership experience and make $250k as the CISO...but would the time, effort, and expense of the degree be worth it at this stage in my life/career?

Welcome everyone's thoughts and insight - especially IT Security folks.