No one. There's no CEO, headquarters, or board. The rules are enforced by everyone who runs the software.
Go deeperDevelopers can propose changes, but a change only takes hold if the people running nodes choose to adopt it. That makes the rules very hard to change, which is the point.