manager-security-department conduct-audits advise-stakeholders ensure-security-compliance analyze-risks train-employees