IT infrastructure, operations and security
Keeps systems, networks and access available and secure and restores disruptions, distinguished by accountability for continuity and for acting during incidents under time pressure.
Example roles: system administrator, network administrator, cloud engineer, security officer, security analyst, service desk engineer
Base profile of the family
Every job in this family inherits this profile and deviates from it with a limited number of additions, adjustments and removals. The target levels below apply to the medior level.
| T | Skill | Target level | Weight | Knockout |
|---|---|---|---|---|
| V | System administration and monitoring | N4 | 5 | yes |
| K | Basic networking knowledge | N4 | 5 | yes |
| V | Incident management and troubleshooting | N4 | 5 | yes |
| V | Access and identity management | N4 | 5 | yes |
| V | Problem analysis | N4 | 5 | yes |
| V | Using cloud platforms | N4 | 4 | no |
| K | Information security awareness | N4 | 4 | no |
| V | Threat and risk analysis | N3 | 4 | no |
| V | Security incident response | N3 | 4 | no |
| V | Information security in the work process | N4 | 4 | no |
| G | Accuracy and attention to detail | N4 | 4 | no |
| G | Stress tolerance | N4 | 4 | no |
| G | Discipline and keeping commitments | N4 | 4 | no |
| G | integrity and dependability | N4 | 4 | no |
| V | Release management and deployment | N3 | 3 | no |
| V | Functional and application management | N3 | 3 | no |
| V | Writing technical documentation | N3 | 3 | no |
| V | Process automation | N3 | 3 | no |
| V | Learning from mistakes and incidents | N3 | 3 | no |
| V | Professional currency and specialist literature | N3 | 3 | no |
| V | Data classification and retention | N3 | 2 | no |
| V | IT supplier and contract management | N2 | 1 | no |
| V | Service calls and telephone contact | N3 | 2 | no |
Seniority adjustment
These values are added to every target level of the family and then clamped to 1 to 5.
Jobs 22
Draws up failover and continuity plans for critical it services, tests those plans periodically and coordinates the organisation during major disruptions or outages.
Holds ultimate responsibility for information security, sets policy and risk appetite and accounts for the security posture to board and supervisors.
Designs the layout of cloud environments, weighs cost, security and vendor dependency and sets the frameworks that engineers work within.
Builds and manages infrastructure on cloud platforms, captures it as code and safeguards availability, security and cost control.
Manages databases, monitors performance and availability, performs backups and recovery procedures and secures data against loss and unauthorised access.
Manages the use and configuration of applications for the user organisation, guides changes and safeguards the fit with work processes.
Manages user identities and access rights to systems, sets up authorisation structures and periodically checks whether rights still match employees' roles.
Connects the organisation's information needs with the IT landscape, draws up plans and steers vendors and projects on results.
Drafts security policy and control frameworks, tests compliance across the organisation and advises management on residual risk.
Designs the setup of networks, servers and workplaces for the longer term and substantiates choices on capacity, continuity and cost.
Manages an organisation's complete IT environment, from workplaces and applications to servers, and handles reports and changes personally.
Purchases it hardware, software and services, negotiates price and terms with suppliers and monitors licences and contracts within the it budget.
Receives user reports, resolves common IT problems and escalates more complex disruptions to specialists in good time.
Manages networks, connections and network security, monitors their performance and restores faults in the connectivity layer.
Oversees the processing of personal data, advises on privacy risks and monitors that processing activities meet legal requirements.
Resolves it disruptions the service desk cannot handle itself, investigates the cause in more depth and documents the fix for repeated reports.
Investigates alerts and logging for signs of attack, determines their severity and initiates the follow up steps during incidents.
Builds and manages technical security controls such as access management, monitoring and hardening and tests the resilience of systems.
Manages storage systems and backup facilities, monitors retention periods and ensures that recovery after data loss demonstrably works.
Manages servers, workplaces and access rights, implements updates and changes and resolves disruptions in the daily IT environment.
Keeps the technical layer beneath applications running by performing maintenance, changes and monitoring in line with agreed service levels.
Manages employees' laptops, phones and workplace applications, rolls out updates and software and keeps workplaces secure and working.