Roles and responsibilities of information security manager