首页 网络安全 网络安全经理 高级网络安全经理 高级网络安全经理 第 8b 职级 · 网络安全经理 ·
606 岗位评估分
本文由人工智能助手从英文翻译而来，尚未经过母语人士审校。引自英国政府数字与数据专业能力框架（UK GDaD PCF）和 ESCO 的内容保留英文原文。
高级网络安全经理领导跨多个团队的网络安全工作，管理对照行业标准的保证，并运行组织的安全改进项目。
职责 领导覆盖运营、工程和保证的网络安全团队。 运行组织的网络安全改进项目并管理其预算。 管理对照行业网络安全标准和 ISO/IEC 27001 控制措施的保证，并为审计准备证据。 领导对重大网络事件的响应，并与业务连续性和临床负责人一起规划和测试恢复。 评估供应商和共享服务的安全性，并在合同中商定安全要求。 就新的临床和数字服务的安全风险向项目群委员会提供建议。 技能 技能 期望等级 该等级的含义 Cyber security governance UK GDaD PCF 熟练 (3) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
develop an effective cyber and information security governance framework that is integrated with overall organisational governance prioritise issues affecting the organisation’s ability to meet security policies and follow standards lead a continuous review process to ensure governance meets changing regulations, legislation and best practices mitigate risks caused by unavoidable exceptions to the governance framework escalating risks to the highest level in the organisation when governance issues do not have defined owners persuading others to use their financial resources for changes needed to comply with the framework helping stakeholders be aware of the risks that are caused when an exception is agreed Cyber risk management UK GDaD PCF 熟练 (3) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
maintain a clear understanding of the cyber and information security risks across the whole organisation develop and implement risk assessment processes oversee the assessment of the organisation's partners and supply chain for potential threats or vulnerabilities building a culture where teams have awareness of, and take responsibility for, risks and mitigating them advising programme owners and people running IT services about risks in a way that enables them to act on that advice communicating with senior leaders in a way that enables them to make decisions about accepting or mitigating risk Cyber incident management UK GDaD PCF 熟练 (3) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
implement cyber incident management processes that reflect the level of risk accepted by the organisation ensure the organisation is prepared for and can effectively respond to incidents determine the impact of critical incidents on the organisation’s technology lead the response to critical incidents that affect the whole organisation helping the incident management team build relationships with senior leaders leading simulation exercises with the board so they understand their role in incident response processes and the implications of potential incidents assessing what to communicate to the board, ministers or the whole organisation, and when to do it Changing security culture UK GDaD PCF 熟练 (3) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
put in place continuous cyber and information security awareness and education programs, for example, training for specific groups use a range of methods to assess whether people’s security behaviour is improving compare the maturity of security awareness and culture in your organisation against others across government to determine effective improvements incentivising the right behaviours across the whole organisation so that everyone knows how they contribute to security persuading senior leadership to represent a campaign personally communicating insights from previous incidents to ensure they are learned from Strategic cyber security planning UK GDaD PCF 胜任 (2) *Senior leadership skill: the UK GDaD PCF defines it with one statement, not by level.* You can: Examples of leadership using this skill:
determine the right balance between the organisation's cyber and information security capabilities, acceptable level of risk and speed of technology progress decide areas that need security investment create a security roadmap that enables the organisation to achieve its objectives explaining the mutual benefits of the security strategy to a range of stakeholders and teams to bring them onboard advising other leaders on how to integrate security requirements in their strategies ensuring security is part of all the organisation's initiatives, despite competing priorities gaining support for investment in security from other leaders 信息治理与数据保护 本参考资料 熟练 (3) 您可以：
领导数据保护影响评估和信息共享协议 就合法依据、同意、保密和保存向团队提供建议 调查事件并提出改进建议 组织风险管理 本参考资料 熟练 (3) 您可以：
为一个总监部或项目群运行风险流程 依据风险偏好评估风险并逐级上报 向委员会报告风险 了解医疗卫生和照护服务 本参考资料 熟练 (3) 您可以：
分析一项服务如何融入跨组织的照护路径 与临床医生、照护人员和患者合作塑造数字服务 解释数字决策对照护、安全和员工工作量的影响 人员管理 本参考资料 熟练 (3) 您可以：
直线管理一个团队，设定目标并开展考评 关注身心健康，管理出勤、绩效和行为 规划团队的发展和继任 预算管理 本参考资料 胜任 (2) 您可以：
对照小额预算跟踪支出并提出差异 在您的权限内批准支出
典型资质与经验 在复杂组织中领导网络安全团队方面拥有广泛经验。 公认的专业安全认证，或同等经验。 第 8b 职级概要
知识 跨多个学科或一项大型服务的专家级知识。
自主性 为一个大领域制定政策和战略。
范围 多项服务或多个团队，或首席级别的一门学科。
领导力 管理经理，或是一门学科的首席权威。
问责 多项服务及其员工和预算。 岗位评估（示例） 因素 等级 等级概述 分数 沟通与人际关系技能 5 传递需要成熟说服和谈判技能的高度复杂或有争议的信息，向大型群体演讲，或在接受方面存在重大障碍时进行沟通。 45 知识、培训和经验 7 覆盖整个专业领域的高度发达的专门知识（硕士水平或同等）。 196 分析与判断技能 5 对需要分析、解读和比较方案的高度复杂事实或情况作出判断。 60 规划与组织技能 5 制定长期战略规划，存在不确定性并影响整个组织。 60 身体技能 2 通过练习获得的技能，例如标准键盘操作或驾驶。 15 对患者和服务对象照护的责任 1 在偶然接触中帮助患者、服务对象或亲属。 4 政策与服务发展的责任 4 实施政策，并为一项服务或多个领域制定政策或服务。 32 对财务和实物资源的责任 4 持有或制定一个部门或服务的预算，或采购或维护其资产。 32 对人员的责任 4 直线管理一项职能或一个部门，以设计培训项目为主要职责，或提供全方位的人力资源服务。 32 对信息资源的责任 5 设计和开发主要信息系统，或以运行多项服务的信息系统为主要职责。 34 对研究与开发的责任 2 作为工作的一部分，定期开展研究、开发、试验或设备与系统测试。 12 行动自由度 5 在一般政策范围内工作，并在大多数情况下自行决定如何解读。 45 体力消耗 1 坐、站和行走，体力消耗很少。 3 脑力消耗 4 经常长时间专注，或偶尔高度专注。 18 情绪消耗 2 偶尔接触，或经常间接接触令人痛苦的情况。 11 工作条件 2 偶尔接触不良条件，经常出差或户外工作，或大多数日子几乎持续使用屏幕。 7 总计（第 8b 职级：585 至 629） 606
脑力和情绪消耗反映领导对重大网络事件的响应，这类事件可能持续数天或数周并威胁患者照护。
