The person named to look after the security of one specific system and make sure its rules are followed.
Like the safety officer for one workshop: knows its machines, checks the rules are followed and reports problems up.
Managed Compliance links the duty to the evidence an auditor wants, and vCIO can hold the role on a retainer.
Who should hold this duty in a small firm?
Someone with authority over how the system is used, supported by an IT provider who handles the technical checks.

Every WILDCARD card exists to solve one named problem. Find yours.