role	role_level	band	skill	skill_source	pcf_reference	esco_reference	expected_level	expected_level_number	expected_level_description	self_rating	manager_rating	gap	evidence	development_action
Security architect	Principal security architect	8c	Analysis	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/2b92a5b2-6758-4ee3-9fb4-b6387a55cc8f; http://data.europa.eu/esco/skill/4707da90-9cfc-46ca-8de0-38a0b7bfb137	expert	4	You can: - provide direction and lead on change regarding factors that feed into analysis - monitor changes in the technical environment and assess whether risks are still at acceptable levels or whether previous decisions need to be revisited - direct and influence others on best practice and policy					
Security architect	Principal security architect	8c	Communication (security architect)	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/c32ad607-0c4d-4e34-b73f-668298f7bf13; http://data.europa.eu/esco/skill/bad614fb-fc66-4401-b75b-3d366013a493	expert	4	You can: - demonstrate expert understanding of security concepts and can apply them to a technical level, at the highest levels of risk complexity - effectively translate and accurately communicate security and risk implications at the most senior levels across technical and non-technical stakeholders - successfully respond to challenges - manage stakeholder expectations across high risk and complexity or under constrained timescales					
Security architect	Principal security architect	8c	Designing secure systems	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/6f1edc19-191f-4ba5-a048-ee69aff05bab; http://data.europa.eu/esco/skill/958559fd-7ab8-44f6-9d65-eb521dc308a5; http://data.europa.eu/esco/skill/3ff589b7-68df-4ea5-ae41-b395bdb2378f	expert	4	You can: - lead design and review solutions to complex problems with system architectures by defining and challenging patterns and principles - create precedents and set direction					
Security architect	Principal security architect	8c	Enabling and informing risk-based decisions	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/0efbe2dc-2770-47ec-b8f4-d1bdff6ac0a4; http://data.europa.eu/esco/skill/1dd23dba-dd00-45ab-abf4-642902538317; http://data.europa.eu/esco/skill/64bd4157-5df0-4166-8259-ede237dd7cdf	expert	4	You can: - act as a point of escalation - be trusted by senior risk owners as an expert in security - apply risk methodologies at the most complex levels of risk					
Security architect	Principal security architect	8c	Research and innovation	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/7a17d7ce-01a2-4746-bbcc-22ffe22fa16e; http://data.europa.eu/esco/skill/20c920d4-7ff7-4676-ba61-3f04490d9416	practitioner	3	You can: - contribute to and inform developments on security properties in technology - identify new technologies and design the use of these in the business context across the organisation - engage with the broader security community					
Security architect	Principal security architect	8c	Security technology	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/dad7e408-162f-46a4-8567-db560e19e2fc; http://data.europa.eu/esco/skill/5898d99a-62a4-4e10-a2e3-0d815ce44248; http://data.europa.eu/esco/skill/501537a7-9d63-491d-ae02-09f04767ff1e	expert	4	You can: - explain complex system architectures - identify and explain how easy or difficult it will be to exploit vulnerabilities - lead and influence security technology in the security industry					
Security architect	Principal security architect	8c	Understanding security implications of transformation	UK GDaD PCF	https://understand-digital-data-roles-skills.service.gov.uk/skills/	http://data.europa.eu/esco/skill/fe1c2b32-7fe9-4668-affa-07ff658a68cf; http://data.europa.eu/esco/skill/7f27f1ff-2e17-4b69-990e-c23334478313; http://data.europa.eu/esco/skill/f9738fc9-4d67-43e8-bfda-954123e34d42	expert	4	You can: - challenge and lead changes to policy and processes to support business outcomes, business architecture, and legal and political implications					
Security architect	Principal security architect	8c	Understanding health and care services	this reference		http://data.europa.eu/esco/skill/9b63d92b-5a3a-46b0-b2ba-c98b39ea5aaf; http://data.europa.eu/esco/skill/6c252ea9-e7df-4f82-8035-7d7ee742ff0e	practitioner	3	You can: - analyse how a service fits into care pathways across organisations - work with clinicians, care staff, and patients to shape digital services - explain the effect of digital decisions on care, safety, and staff workload 					
Security architect	Principal security architect	8c	Information governance and data protection	this reference		http://data.europa.eu/esco/skill/a4346013-a967-4a58-a533-6b32ad1364c5; http://data.europa.eu/esco/skill/51ece34f-c24e-4183-9bf4-9b6f28748aec; http://data.europa.eu/esco/skill/097c6a36-f031-4d3e-b5c1-62d6ffcb430b	expert	4	You can: - set information governance policy and strategy - advise the board on information risk and compliance - represent the organisation with regulators and partners 					
Security architect	Principal security architect	8c	Identity and access management	this reference		http://data.europa.eu/esco/skill/ab49f767-296b-47d5-af56-0b4a69515b03; http://data.europa.eu/esco/skill/bc0b0b5d-f6be-405a-b224-b6902a4dbe97	expert	4	You can: - set the identity and access strategy for staff, patients, and systems - lead the adoption of new identity standards 					
Security architect	Principal security architect	8c	Vulnerability management	this reference		http://data.europa.eu/esco/skill/fe1c2b32-7fe9-4668-affa-07ff658a68cf; http://data.europa.eu/esco/skill/902fb91c-3113-4004-9b4f-79aa86b638b7	practitioner	3	You can: - prioritise vulnerabilities by risk, including to patient services - scope and manage penetration tests and remediation 					
Security architect	Principal security architect	8c	Security operations	this reference		http://data.europa.eu/esco/skill/8181aa4c-42bc-4036-a3d2-5cb6bbb34239; http://data.europa.eu/esco/skill/5898d99a-62a4-4e10-a2e3-0d815ce44248; http://data.europa.eu/esco/skill/501537a7-9d63-491d-ae02-09f04767ff1e	practitioner	3	You can: - investigate and contain security incidents - write detection rules and threat hunts - improve runbooks and tooling after incidents 					
Security architect	Principal security architect	8c	Clinical risk management	this reference		http://data.europa.eu/esco/skill/47d491a9-f7c0-4b13-a10f-983d3aa0113e; http://data.europa.eu/esco/skill/4913d0c0-133a-4c46-aac3-f5d4989a982e	practitioner	3	You can: - lead hazard identification and risk assessment for a product or change - write and maintain hazard logs and clinical safety case reports - agree risk controls with product teams and check that they work - advise teams on applying clinical risk management standards 					
Security architect	Principal security architect	8c	Medical device software regulation	this reference		http://data.europa.eu/esco/skill/f453b1a6-c7db-4d9d-9ba3-47c45159bfe3	working	2	You can: - follow a software life cycle process that meets medical device standards - produce the records that such a process requires 					
Security architect	Principal security architect	8c	Organisational risk management	this reference		http://data.europa.eu/esco/skill/6eff134b-e34f-4d6e-a6e8-5e47cf2228d0; http://data.europa.eu/esco/skill/00920055-eb50-4cb8-a23d-3deedbf3753e; http://data.europa.eu/esco/skill/96550830-539b-4746-96aa-92aa4959945d	expert	4	You can: - design the organisation's risk management framework and appetite - advise the board on strategic risks 					
Security architect	Principal security architect	8c	People management	this reference		http://data.europa.eu/esco/skill/339ac029-066a-4985-9f9d-b3d7c8fea0bb; http://data.europa.eu/esco/skill/add39442-b8ca-4412-8156-391db53b0c5d	practitioner	3	You can: - line manage a team, setting objectives and running appraisals - support wellbeing and manage attendance, performance, and conduct - plan the team's development and succession