Core Responsibilities Define and own enterprise software supply chain security strategy, roadmap, and governance Establish policies and guardrails for SBOM, artifact signing, provenance, and dependency usage Embed security controls across SDLC, CI/CD pipelines, and artifact repositories