Part of my role is "security certifier", which means working closely pen testers and Op/DevSec folks to review various systems and applications across subdivisions in a larger org.