Is a degree necessary for the highest-level roles in infosec?

If you go the “experience and certs with no degree” route, would you be able to become a CISO, Consultant, or Senior Security Architect, maybe after 10-20 years of IT and cybersecurity experience?

Those higher level roles kind of seem like they may require a bachelors and maybe an MBA

architect ciso consultant cybersecurity experience higher infosec may roles security security architect