Despite the rise of CISOs and CSOs, top security execs still lack the autonomy and clout given to their C-suite counterparts