Assigned AoR not working

Summary:

Content (required):

Hello everyone,

We created a new AoR lookup code (IT Onboarding) as we wanted to restrict the visibility of the IT users during a specific process in onboarding/journey. Moreover, when we created the custom IT Auditor role we made sure to select "Secure by area of responsibility" option for the Security Profile. Furthermore, as you can see in the screenshot below, we added the new AoR (IT Onboarding) to a user.

However, the AoR doesn't seem to be working, as the above user has access to all tasks in the journey/onboarding.

Since we assigned the AoR and we made sure that the IT role has security profiles managed by its own AoR, we don't understand why the user can see everything.