A large engineering organization wants to launch a coordinated effort to remediate a specific class of high-severity Dependabot alerts across dozens of repositories. A security manager plans to use a GitHub security campaign to group these alerts, assign them to teams, and track remediation progress. When configuring who can create and manage the campaign at the organization level, which permission or role is required to create the security campaign?