The CISO oversees security operations, risk management, compliance, and the organization's overall security posture. They are typically the primary decision-maker for security technology investments and are accountable for communicating security outcomes to the board and executive leadership. In the context of SOC operations, the CISO sets priorities, approves budgets, and is ultimately responsible for the organization's ability to detect and respond to threats.