What your undergrad is in really doesn't mean anything if you've got experience, especially if you got it at a time when most schools didn't have cyber-security programs/concentrations within CS and CS was more closely aligned with math.

Some of the best infosec people I know have completely irrelevant degrees.

That said, I'm not trying to make excuses for Equifax. From what we know the head of infosec there was not qualified to do the job.