Yes. Happens in a lot of companies I think, especially “older” companies that don’t have big security focus. Honestly, I think if you’re a good manager you can be successful even if you aren’t super technical.