The role of finalizing strategy, policies, and procedures for a Security Operations Center (SOC) typically falls under the responsibilities of a Chief Information Security Officer (CISO). The CISO is a senior-level executive within an organization who coordinates and manages the overall strategy and defense mechanisms to protect the organization's information and technology assets. This role involves leadership and strategic decision-making, which includes establishing the SOC's framework, defining its policies, and overseeing its procedures.
References: The EC-Council provides various resources and guides that outline the roles and responsibilities within a SOC. According to the information available, a Security Analyst, whether Level 1 or Level 2, is primarily responsible for monitoring and analyzing the organization's security posture on a continuous basis.
A Security Engineer focuses on the design and implementation of security systems. In contrast, the CISO role encompasses a broader scope of strategic leadership and management, which aligns with the responsibilities described for John in the scenario12.