Security Is Security's Responsibility (franklyspeaking.substack.com)

IMO its always best to have one or two people responsible for a single "major thing", be that security, that big client , marketing etc. Doesnt mean they take all decisions or do all the work, but just someone sjnglemindedly focusing that the task gets done well.