Depends on how the organization grew, and if they have unified processes across department. AFAIK the IT security folks at a financial institution that I used

Depends on how the organization grew, and if they have unified processes across department. AFAIK the IT security folks at a financial institution that I used to work at are living in hell at the moment. That organization grew internationally through acquisitions across more than 80 countries, and lacks unified structure across the entire organization due to legal and compliance constraints unique to each jurisdiction. A web development shop I provide security guidance to (owned by one my TTRPG buddies) had to do a couple of searches in github and update some hardware as patches became available. We made sure he was sorted out over a couple of drinks before we played board games. It varies.