> ## Documentation Index
> Fetch the complete documentation index at: https://help.dsalta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security Roles

> Assign organizational compliance roles like InfoSec Officer, Privacy Officer, and People Ops.

Security roles are organizational function assignments — they determine who is responsible for specific compliance tasks within your organization.

## Available security roles

| Role                           | Description                                                                                                                                         |
| ------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------- |
| **InfoSec Officer / CISO**     | Responsible for information security policies, controls, and risk management                                                                        |
| **Privacy Officer**            | Responsible for data privacy policies and GDPR-related compliance                                                                                   |
| **People Operations Person**   | HR and people processes that support compliance — onboarding/offboarding, policy acknowledgements, training coordination                            |
| **Infra Operations Person**    | Engineering and cloud infrastructure operations — secure configuration, access controls, monitoring readiness, remediation of infrastructure issues |
| **Senior Management**          | Executive accountability for governance — approving key policies and accepting material risks                                                       |
| **Compliance Program Manager** | Runs the compliance program day to day — coordinating evidence collection, assigning ownership, tracking due dates, audit readiness                 |

## How security roles work

Assigning a security role fills in the owner on every **policy, document and test** that names that role and does not have an owner yet; anything already owned keeps the owner it has. Controls, risk scenarios and questionnaires carry their own owner field, which you set on the item itself.

<Info>
  For small teams, one person can hold multiple security roles. A single person can manage the entire compliance program — the platform adjusts task assignments accordingly.
</Info>

## Related pages

* [Roles & Permissions](/guides/settings/roles-and-permissions)