Since then , this individual 's responsibilities for information security policy development and awareness , which had previously been handled on a part-time basis , have evolved into a full-time awareness manager position in the organization 's central security group .
The person scaled back the security policy role and is now part time .