Coordinate product vulnerability management and incident reporting, triage and analyze vulnerabilities, track remediation with product and DevSecOps teams, monitor threat intelligence and disclosures, support regulatory reporting (including EU CRA), and produce status metrics and governance reports.