Msanifu mkuu wa usalama

Daraja la 8c · Msanifu wa usalama · Alama 662 za tathmini ya kazi

Tafsiri hii ilifanywa kutoka Kiingereza na msaidizi wa akili bandia na bado haijakaguliwa na mzungumzaji asilia. Nukuu kutoka UK GDaD PCF (Mfumo wa Uwezo wa Taaluma ya Kidijitali na Data wa Serikali ya Uingereza) na ESCO zinabaki kwa Kiingereza.

Kiwango cha UK GDaD PCF: Principal security architect

Mara nyingi hufanywa katika daraja la Utumishi wa Umma G6.

A principal security architect works on services of high complexity and risk, making decisions to enable the business to achieve its needs.
At this role level, you will:
work on projects with high strategic impact, setting a strategy that can be used in the long term and across the breadth of the organisation
communicate with a broad range of senior stakeholders and be responsible for defining the vision, principles and strategy for security architects
recommend security design across several projects or technologies, up to an organisational or inter-organisational level
have a deep and evolving level of technical expertise, so you can act as an exemplar
make and influence important business and architectural decisions
research, identify, validate and adopt new technologies and methodologies
be a recognised expert and demonstrate this expertise by solving unprecedented issues and problems
further the profession, demonstrating and sharing best practice within and outside the organisation

Contains public sector information from the UK Government Digital and Data Profession Capability Framework (https://understand-digital-data-roles-skills.service.gov.uk/), licensed under the Open Government Licence v3.0. © Crown copyright.

Wajibu

Kuweka maono, kanuni na mkakati wa usanifu wa usalama wa taasisi.
Kuishauri timu ya watendaji na bodi kuhusu hatari ya usalama wa mtandao kwa matunzo ya wagonjwa na huduma.
Kuhakikisha ustahimilivu wa mtandao, ikiwemo urejeshaji baada ya shambulio kubwa, umebuniwa ndani ya huduma muhimu za kitabibu.
Kuiwakilisha taasisi katika jumuiya za usalama wa mtandao na viwango za taasisi mbalimbali.
Kuongoza mazoezi ya usanifu wa usalama na kuendeleza watu wake.

Ujuzi

Ujuzi	Kiwango kinachotarajiwa	Kiwango hiki kinamaanisha nini
AnalysisUK GDaD PCF	Bingwa (4)	You can: provide direction and lead on change regarding factors that feed into analysis monitor changes in the technical environment and assess whether risks are still at acceptable levels or whether previous decisions need to be revisited direct and influence others on best practice and policy
Communication (security architect)UK GDaD PCF	Bingwa (4)	You can: demonstrate expert understanding of security concepts and can apply them to a technical level, at the highest levels of risk complexity effectively translate and accurately communicate security and risk implications at the most senior levels across technical and non-technical stakeholders successfully respond to challenges manage stakeholder expectations across high risk and complexity or under constrained timescales
Designing secure systemsUK GDaD PCF	Bingwa (4)	You can: lead design and review solutions to complex problems with system architectures by defining and challenging patterns and principles create precedents and set direction
Enabling and informing risk-based decisionsUK GDaD PCF	Bingwa (4)	You can: act as a point of escalation be trusted by senior risk owners as an expert in security apply risk methodologies at the most complex levels of risk
Research and innovationUK GDaD PCF	Mtaalamu (3)	You can: contribute to and inform developments on security properties in technology identify new technologies and design the use of these in the business context across the organisation engage with the broader security community
Security technologyUK GDaD PCF	Bingwa (4)	You can: explain complex system architectures identify and explain how easy or difficult it will be to exploit vulnerabilities lead and influence security technology in the security industry
Understanding security implications of transformationUK GDaD PCF	Bingwa (4)	You can: challenge and lead changes to policy and processes to support business outcomes, business architecture, and legal and political implications
Kuelewa huduma za afya na matunzoMarejeleo haya	Mtaalamu (3)	Unaweza: kuchambua jinsi huduma inavyolingana na njia za matunzo katika taasisi mbalimbali kufanya kazi na madaktari, wafanyakazi wa matunzo na wagonjwa kuunda huduma za kidijitali kueleza athari za maamuzi ya kidijitali kwa matunzo, usalama na mzigo wa kazi wa wafanyakazi
Usimamizi wa taarifa na ulinzi wa dataMarejeleo haya	Bingwa (4)	Unaweza: kuweka sera na mkakati wa usimamizi wa taarifa kuishauri bodi kuhusu hatari za taarifa na utiifu kuiwakilisha taasisi kwa wadhibiti na washirika
Usimamizi wa utambulisho na ufikiajiMarejeleo haya	Bingwa (4)	Unaweza: kuweka mkakati wa utambulisho na ufikiaji kwa wafanyakazi, wagonjwa na mifumo kuongoza kupitishwa kwa viwango vipya vya utambulisho
Usimamizi wa udhaifuMarejeleo haya	Mtaalamu (3)	Unaweza: kuweka vipaumbele vya udhaifu kwa hatari, ikiwemo kwa huduma za wagonjwa kubainisha wigo na kusimamia majaribio ya kupenya na urekebishaji
Uendeshaji wa usalamaMarejeleo haya	Mtaalamu (3)	Unaweza: kuchunguza na kudhibiti matukio ya usalama kuandika kanuni za ugunduzi na uwindaji wa vitisho kuboresha miongozo ya uendeshaji na zana baada ya matukio
Usimamizi wa hatari za kitabibuMarejeleo haya	Mtaalamu (3)	Unaweza: kuongoza utambuzi wa hatari na tathmini ya hatari kwa bidhaa au mabadiliko kuandika na kutunza kumbukumbu za hatari na ripoti za hoja za usalama wa kitabibu kukubaliana udhibiti wa hatari na timu za bidhaa na kukagua kama unafanya kazi kushauri timu kuhusu kutumia viwango vya usimamizi wa hatari za kitabibu
Udhibiti wa programu za vifaa tibaMarejeleo haya	Utendaji (2)	Unaweza: kufuata mchakato wa mzunguko wa maisha wa programu unaotimiza viwango vya vifaa tiba kutengeneza kumbukumbu ambazo mchakato kama huo unahitaji
Usimamizi wa hatari za taasisiMarejeleo haya	Bingwa (4)	Unaweza: kubuni mfumo wa usimamizi wa hatari na kiwango cha kukubali hatari cha taasisi kuishauri bodi kuhusu hatari za kimkakati
Usimamizi wa watuMarejeleo haya	Mtaalamu (3)	Unaweza: kusimamia timu moja kwa moja, ukiweka malengo na kuendesha tathmini za utendaji kusaidia ustawi na kusimamia mahudhurio, utendaji na mwenendo kupanga maendeleo ya timu na urithi wa nafasi

Sifa na uzoefu wa kawaida

Uzoefu mpana wa kuongoza usanifu wa usalama katika taasisi mbalimbali.

Muhtasari wa Daraja la 8c

Maarifa: Ujuzi wa kitaalamu, pamoja na uelewa mpana wa taasisi na sekta.
Uhuru wa kutenda: Huweka mkakati wa kitengo; anawajibika kwa mkurugenzi.
Wigo: Kitengo au idara.
Uongozi: Huongoza kitengo kupitia ngazi kadhaa za usimamizi.
Uwajibikaji: Utendaji wa kitengo, nguvu kazi yake, na bajeti yake.

Tathmini ya kazi (ya kielelezo)

Kigezo	Kiwango	Muhtasari wa kiwango	Alama
Ujuzi wa mawasiliano na kujenga mahusiano	6	Hutoa taarifa tata sana na zenye utata mkubwa palipo na vikwazo vikubwa vya ukubalifu, kwa kutumia kiwango cha juu kabisa cha ujuzi wa mawasiliano.	60
Maarifa, mafunzo na uzoefu	8	Maarifa ya hali ya juu (shahada ya uzamivu pamoja na mafunzo ya ziada au yanayolingana), au maarifa maalumu katika fani zaidi ya moja yaliyojengwa kwa kipindi kirefu.	240
Ujuzi wa uchambuzi na uamuzi	5	Hufanya maamuzi kuhusu ukweli au hali tata sana zinazohitaji uchambuzi, ufasiri na ulinganisho wa chaguzi.	60
Ujuzi wa kupanga na kuratibu	5	Hutunga mipango ya kimkakati ya muda mrefu, yenye kutokuwa na uhakika na athari katika taasisi nzima.	60
Ujuzi wa kimwili	2	Ujuzi unaopatikana kwa mazoezi, kama vile matumizi ya kawaida ya kibodi au kuendesha gari.	15
Wajibu wa huduma kwa wagonjwa na wateja	1	Huwasaidia wagonjwa, wateja au ndugu wakati wa mawasiliano ya bahati.	4
Wajibu wa sera na uendelezaji wa huduma	5	Hutekeleza na kuendeleza sera au huduma mbalimbali kwa kurugenzi.	45
Wajibu wa rasilimali za fedha na mali	3	Huidhinisha malipo, hununua baadhi ya mali au vifaa, hufuatilia au husimamia bajeti iliyokabidhiwa, au hutunza mali.	21
Wajibu kwa watu	3	Husimamia kundi la wafanyakazi kila siku, hufundisha mafunzo ya msingi au maalumu, au hutoa ushauri wa msingi wa rasilimali watu.	21
Wajibu wa rasilimali za taarifa	6	Husimamia na kuendeleza mifumo ya taarifa katika taasisi nzima kama jukumu kuu.	46
Wajibu wa utafiti na maendeleo	2	Mara kwa mara hufanya utafiti, maendeleo, majaribio ya kitaalamu, au majaribio ya vifaa na mifumo kama sehemu ya kazi.	12
Uhuru wa kutenda	5	Hufanya kazi ndani ya sera za jumla, na katika hali nyingi huamua jinsi ya kuzifasiri.	45
Juhudi za kimwili	1	Kukaa, kusimama na kutembea, kwa juhudi ndogo ya kimwili.	3
Juhudi za kiakili	4	Umakini wa muda mrefu mara kwa mara, au umakini mkali mara chache.	18
Juhudi za kihisia	1	Kukumbana mara chache, au kukumbana kwa njia isiyo ya moja kwa moja mara chache, na hali zenye kusikitisha.	5
Mazingira ya kazi	2	Mazingira yasiyopendeza mara chache, safari za mara kwa mara au kazi za nje, au matumizi ya skrini karibu bila kikomo siku nyingi.	7
Jumla (Daraja la 8c: 630 hadi 674)			662