More granularly, they are responsible for preventing data breaches and monitoring and reacting to attacks. Many have backgrounds as programmers, and systems or network administrators, and in math and statistics.