IT security pays very well and is very high demand, although its extremely specialized. No one "starts out" in security; they end up there after years of doing other stuff. Basically, you have to know a lot about everything and there's really nothing that qualifies you other than lots of experience. There are some certs out there but at the end of the day security folks will be guys that have a very strong background in UNIX, TCP/IP, Windows, and everything else in between.
The head of our security group makes slightly less than our CIO if that's any indication how valued a top-notch IT security person is. This is in a fairly large org with over 5,000 workstations and several hundred servers.