Acts as the main security reference for NIS2 compliance, performing risk assessments, and drafting security policies.