As per https://github.com/kubernetes/community/blob/master/committee-steering/governance/sig-governance-template-short.md a SECURITY_CONTACTS file has been created.
Charlie Drage