Look for experience where you can get it. Is there anything at your current company that is in IT/security that you could take on? I rose in my career by noticing jobs that weren't being done and volunteering to do them, even if I was being paid the same. I was getting paid in experience, not dollars. I surpassed many people in career advancement because I was willing to do it for free now and get paid by advancement later, versus waiting to get paid more and then doing higher level work.
Need experience? Create your own. Go buy second hand computers/routers from junk/thrift stores or buy old ones from individuals. Then create your own network at home. By building a lab to work on, you will gain experience and see if you really like this type of work. It will also give you an understanding of how the technology beneath the security roles you seek, actually works. By knowing how stuff works, you can learn how to attack it. And then learn to protect it. Plus, if you own it, you can legally hack it (provided you do not stray beyond your legal boundaries.) Download free security tools and play with them. Don't know programming languages? Then learn Python. By teaching yourself you will learn lots of things. You really could choose any language but Python seems to be of use in the security roles. There are plenty of free resources out there.
Can you get rich in information security? Depends on how motivated you are. The profession does pay well and you can go as high as your ambition will take you. I make six figures in the U.S. Many people consider that rather successful. However the most important thing since I got back into IT/IT Security is that I LOVE WHAT I DO. I got back into this field 18 years ago and do not feel that I have really "worked" a day since then. I have loved coming into work and never dreaded it during this time. I also am ambitious, a continuous learner, and have learned leadership, management, and the difference between the two. I also thoroughly love being in IT and IT security. Having said that, I will also say this: Don't get into the IT security field (or any field for that matter) for the money alone. You will come to despise your career. I have seen many people burn out in their careers because they were not willing to keep up with the constantly changing environment. They also stopped progressing in their careers because they hated having to try to keep up. They got into INFOSEC for the money and ended up hating their careers, but then felt locked into them so they "couldn't" quit. If this career path does not excite you, then find another career path. There are many different careers you can have in IT and IT security so try several of them.
I recommend getting experience in a helpdesk role. It will help you to learn customer service. That skill becomes very important if you want to get into management. Too many in the security field want to say no before understanding the customer need. You need to be innovative and look for solutions instead of just offering one solution.
