IT security team organization chart. The IT security team is responsible for three areas: Area 1: Governance, Risk and Compliance Area 2: Application and System Security Area 3: Operational Security The first area (Governance, Risk and Compliance) includes the following roles: risk analyst, compliance officer, crisis manager, cybersecurity auditor. The second area (Application and System Security) includes the following roles: security architect, application security manager, technical auditor. The third area (Operational Security) includes the following roles: SOC analyst and SOC manager, threat analyst, CERT/CSIRT analyst and CERT/CSIRT manager.