首页 网络安全 网络安全经理 网络安全主管 网络安全主管 第 8c 职级 · 网络安全经理 ·
646 岗位评估分
本文由人工智能助手从英文翻译而来，尚未经过母语人士审校。引自英国政府数字与数据专业能力框架（UK GDaD PCF）和 ESCO 的内容保留英文原文。
网络安全主管制定组织的网络安全战略，并对其网络风险管理、安全运营和重大事件响应负责。
职责 按照组织的数字和临床战略制定网络安全战略。 就网络风险、风险偏好和投资向董事会和执行团队提供建议。 领导组织对重大网络事件的响应，包括与监管机构、合作伙伴和公众沟通。 营造安全文化，使包括临床医生在内的全体员工了解威胁并报告威胁。 在医疗卫生网络安全网络中以及与合作组织沟通时代表组织。 领导和培养网络安全职能，并管理其预算。 技能 技能 期望等级 该等级的含义 Strategic cyber security planning UK GDaD PCF 熟练 (3) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
determine the right balance between the organisation's cyber and information security capabilities, acceptable level of risk and speed of technology progress decide areas that need security investment create a security roadmap that enables the organisation to achieve its objectives explaining the mutual benefits of the security strategy to a range of stakeholders and teams to bring them onboard advising other leaders on how to integrate security requirements in their strategies ensuring security is part of all the organisation's initiatives, despite competing priorities gaining support for investment in security from other leaders Cyber security governance UK GDaD PCF 专家 (4) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
develop an effective cyber and information security governance framework that is integrated with overall organisational governance prioritise issues affecting the organisation’s ability to meet security policies and follow standards lead a continuous review process to ensure governance meets changing regulations, legislation and best practices mitigate risks caused by unavoidable exceptions to the governance framework escalating risks to the highest level in the organisation when governance issues do not have defined owners persuading others to use their financial resources for changes needed to comply with the framework helping stakeholders be aware of the risks that are caused when an exception is agreed Cyber risk management UK GDaD PCF 专家 (4) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
maintain a clear understanding of the cyber and information security risks across the whole organisation develop and implement risk assessment processes oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities building a culture where teams have awareness of, and take responsibility for, risks and mitigating them advising programme owners and people running IT services about risks in a way that enables them to act on that advice communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk Cyber incident management UK GDaD PCF 熟练 (3) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
implement cyber incident management processes that reflect the level of risk accepted by the organisation ensure the organisation is prepared for and can effectively respond to incidents determine the impact of critical incidents on the organisation’s technology lead the response to critical incidents that affect the whole organisation helping the incident management team build relationships with senior leaders leading simulation exercises with the board so they understand their role in incident response processes and the implications of potential incidents assessing what to communicate to the board, ministers or the whole organisation, and when to do it Changing security culture UK GDaD PCF 熟练 (3) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
put in place continuous cyber and information security awareness and education programs, for example, training for specific groups use a range of methods to assess whether people’s security behaviour is improving compare the maturity of security awareness and culture in your organisation against others across government to determine effective improvements incentivising the right behaviours across the whole organisation so that everyone knows how they contribute to security persuading senior leadership to represent a campaign personally communicating insights from previous incidents to ensure they are learned from 信息治理与数据保护 本参考资料 熟练 (3) 您可以：
领导数据保护影响评估和信息共享协议 就合法依据、同意、保密和保存向团队提供建议 调查事件并提出改进建议 组织风险管理 本参考资料 熟练 (3) 您可以：
为一个总监部或项目群运行风险流程 依据风险偏好评估风险并逐级上报 向委员会报告风险 了解医疗卫生和照护服务 本参考资料 熟练 (3) 您可以：
分析一项服务如何融入跨组织的照护路径 与临床医生、照护人员和患者合作塑造数字服务 解释数字决策对照护、安全和员工工作量的影响 人员管理 本参考资料 熟练 (3) 您可以：
直线管理一个团队，设定目标并开展考评 关注身心健康，管理出勤、绩效和行为 规划团队的发展和继任 预算管理 本参考资料 熟练 (3) 您可以：
持有并管理预算，进行预测并解释差异 编制包含成本和效益的商业论证
典型资质与经验 在领导大型组织的网络安全（包括重大事件响应）方面拥有广泛经验。 第 8c 职级概要
知识 专家级知识，以及对组织和行业的广泛理解。
自主性 为一项职能制定战略；向一名总监负责。
范围 一项职能或一个部门。
领导力 通过多个管理层级领导一项职能。
问责 一项职能的绩效、人员和预算。 岗位评估（示例） 因素 等级 等级概述 分数 沟通与人际关系技能 6 在接受方面存在重大障碍时，运用最高水平的沟通技能传递高度复杂、高度争议的信息。 60 知识、培训和经验 7 覆盖整个专业领域的高度发达的专门知识（硕士水平或同等）。 196 分析与判断技能 5 对需要分析、解读和比较方案的高度复杂事实或情况作出判断。 60 规划与组织技能 5 制定长期战略规划，存在不确定性并影响整个组织。 60 身体技能 2 通过练习获得的技能，例如标准键盘操作或驾驶。 15 对患者和服务对象照护的责任 1 在偶然接触中帮助患者、服务对象或亲属。 4 政策与服务发展的责任 5 为一个总监部实施和制定一系列政策或服务。 45 对财务和实物资源的责任 4 持有或制定一个部门或服务的预算，或采购或维护其资产。 32 对人员的责任 4 直线管理一项职能或一个部门，以设计培训项目为主要职责，或提供全方位的人力资源服务。 32 对信息资源的责任 6 以管理和开发全组织的信息系统为主要职责。 46 对研究与开发的责任 2 作为工作的一部分，定期开展研究、开发、试验或设备与系统测试。 12 行动自由度 5 在一般政策范围内工作，并在大多数情况下自行决定如何解读。 45 体力消耗 1 坐、站和行走，体力消耗很少。 3 脑力消耗 4 经常长时间专注，或偶尔高度专注。 18 情绪消耗 2 偶尔接触，或经常间接接触令人痛苦的情况。 11 工作条件 2 偶尔接触不良条件，经常出差或户外工作，或大多数日子几乎持续使用屏幕。 7 总计（第 8c 职级：630 至 674） 646
