Illustrative Reference profiles for a generic digital health care organization, not official job descriptions. About this reference.

Cyber security

3 roles. The UK GDaD PCF has no matching family, so this reference defines these roles.

Security operations analyst

Security operations analysts watch for, investigate, and respond to cyber security threats to the organization's systems and data. They triage alerts from security monitoring tools, investigate suspicious activity, contain incidents, and help fix weaknesses. In health care, fast detection and response protects clinical services and confidential patient information from attacks such as ransomware.

  1. Band 5 Junior security operations analyst
  2. Band 6 Security operations analyst
  3. Band 7 Senior security operations analyst

Security engineer

Security engineers design, build, and run the technical security controls that protect the organization's systems, data, and users. They work on identity and access, endpoint and network protection, encryption, logging, and cloud security, and help product and infrastructure teams build security in. In health care, they protect clinical systems and patient data while keeping access fast for clinicians at the point of care.

  1. Band 6 Security engineer
  2. Band 7 Senior security engineer
  3. Band 8a Lead security engineer

Cyber security manager

Cyber security managers lead the organization's approach to protecting its systems, data, and services from cyber threats. They set security policy, manage cyber risk, oversee security operations and engineering, lead the response to major cyber incidents, and build a security-aware culture. In health care, they make sure clinical services can keep running safely, and recover quickly, when an attack happens.

  1. Band 8a Cyber security manager
  2. Band 8b Senior cyber security manager
  3. Band 8c Head of cyber security
  4. Band 8d Chief information security officer