POSITION INFORMATION DOCUMENT Position Title: Manager, ICT Continuity Planning Classification Code: ASO7 Division: ICT Services Directorate: ICT Operations Type of Appointment: Branch: ICT Security Ongoing Position Number: o Temporary Position Created: o Other As part of the South Australian Government s health reform agenda, the Department of Health is embarking on a significant reorganisation of its ICT services across South Australia. An external feasibility report on the centralisation of ICT services across the public health system was delivered and accepted by the Health Portfolio Executive in December 2007. In centralising ICT services the following objectives are being sought: management of all ICT services from a whole of health strategic perspective a uniform and repeatable ICT environment across SA Health to support the effective delivery of health care services to the people of South Australia achievement of operational savings to contribute to the upgrade of public health infrastructure and ICT services establishment of a uniform platform for the introduction of the electronic health record mirror the South Australian Government s practice and commitment to shared services. ICT Services has established the ICT Operations directorate (formerly known as ICT Service Delivery) to lead and oversee the management of service wide ICT operational technologies and systems representing approximately 75% of total annual operating costs (over $50m per annum). The centralisation of ICT services has resulted in the establishment of 6 new directorates: ICT Strategy and Standards ICT Contracts and Performance Management ICT Customer Services ICT Program Services ICT Operations ICT Business Services Sets, defines and aligns ICT strategy and standards to the goals and objectives of SA Health and provides independent governance and risk management to ICT Services. Is the major procurement, contract and performance management arm of sourcing ICT related services, products and systems. Is the major point of coordination and interaction with ICT customers across SA Health. Manages and delivers all ICT projects as approved by the ICT Steering Committee. Manages, supports and maintains the production environment across SA Health. Provides internal corporate support to ICT Services with an emphasis on staff development and training. Page 1 of 10
The Manager, ICT Continuity Planning is accountable for service continuity planning across the Health Portfolio including identification and risk assessment of ICT systems supporting critical business processes, to ensure those systems availability, integrity and confidentiality. This position works in close collaboration with whole of SA Health business continuity planning area(s). The position will also contribute to the achievement of ICT Security branch and ICT Operations directorate goals and objectives through leading the following functions: ICT security planning including: development and governance of security strategies creation and maintenance of the enterprise s security architecture design coordinating the evaluation, deployment, and management of current and future security technologies creation and maintenance of the ICT enterprise security documents in accordance with Government Security Guidelines maintaining up-to-date knowledge of ICT security industry solutions ICT security standards including establishment and enforcement of ICT security policy, standards and processes Compliance / audit of existing systems to ensure compliance with ICT security policy and standards Intrusion monitoring and resolution against security breaches and vulnerability issues including identification of ICT security risks and implementation of defence initiatives Disaster planning including the design and implementation of disaster recovery plans, procedures, audits and enhancements including pandemic readiness planning. This will require the incumbent to understand the variety and complexity of SA Health s information systems and business models across a wide range of departments and divisions including metropolitan and country health units. SA Health information systems include over 460 sites, 20,000 desktops, 500 servers and over 1,000 applications. The customer base is estimated at over 25,000 users. ORGANISATION Supervisor reports to: Supervisor s Position: Subject position: Director, ICT Operations Senior Manager, ICT Security Manager, ICT Continuity Planning Staff supervised: Other positions reporting to supervisor: Manager, ICT Security Business Assurance Manager, ICT Security Technical Assurance STATISTICS RELEVANT TO THE POSITION Staff supervised: Budget: Salaries and wages: Goods and services: Page 2 of 10
JOB AND PERSON SPECIFICATION Position Title: Manager, ICT Continuity Planning Classification Code: ASO7 Division: ICT Services Directorate: ICT Operations Type of Appointment: Branch: ICT Security Ongoing Position Number: o Temporary Position Created: o Other Job & person specification approval CE or delegate / / PREAMBLE: Underpinning the Department of Health Strategic Directions are the agreed values that reflect honesty, respect and integrity for every individual. These values drive how we conduct our business and how we behave. We aim to make the values live. It is important that we incorporate the values into our behaviour systems and processes. The Department has a Commitment to Workplace Values attached to Job and Person Specifications that all staff are required to uphold. (Please refer to the back of this document). Australia has one of the most culturally and ethnically diverse populations in the world. Having a diverse workforce (inclusive of bi-lingual, bi-cultural and disabled employees) can enhance the department s ability to negotiate with, and meet the needs of, the full range of its clients and customers. Such employees also add to the diversity of the workforce, and give added opportunities to fully capitalise on difference as a valuable asset in an increasingly competitive environment. Page 3 of 10
JOB SPECIFICATION 1. Summary of the broad purpose of the position in relation to the organisation's goals The Manager, ICT Continuity Planning is accountable for service continuity planning across the Health Portfolio including identification and risk assessment of ICT systems supporting critical business processes, to ensure those systems availability, integrity and confidentiality. This position works in close collaboration with whole of SA Health business continuity planning area(s). 2. Reporting/working relationships Reports to the Senior Manager, ICT Security Primary working relationship with Manager, ICT Security Technical Assurance and Manager, ICT Security Business Assurance within the ICT Security branch Close working relationship with whole of Health business continuity planning area(s) Direct responsibility for coordinating professional / technical staff Liaises extensively with other areas of ICT Services and external vendors Liaises extensively with customers, senior management and staff within SA Health and ICT Services Interaction with business account managers assigned by business units across SA Health, ICT customer account managers and service delivery managers. 3. Special conditions The incumbent may be required to work out of hours The incumbent may be required to travel or work across and/or be located at any of the Department of Health units/divisions as required A flexible approach to the taking of leave is required The appointee may be subject to a criminal history check prior to confirmation of appointment The incumbent will uphold the values of the Department of Health as reflected in the SA Health Strategic Plan The incumbent may be assigned elsewhere within the department subject to relevant provisions of the PSM Act The incumbent may be required to enter into an annual performance agreement for the achievement of specific (service or program) outcomes. 4. Statement of key outcomes and activities 1. Ensure effective ICT service continuity management planning processes to support the Health Portfolio s business continuity management activities through: Page 4 of 10
a) coordinating the identification of ICT systems that support the critical business processes, and the assessment of risks to the availability, integrity, and confidentiality of those systems b) developing and maintaining SA Health s ICT continuity strategy that encompasses all regions, health units and agencies of the Health Portfolio c) implementing and maintaining the ICT service continuity management process, in accordance with the overall requirements of SA Health s business continuity management processes and plans d) coordinating the planning, designing, testing of maintenance procedures and contingency plans to address exposure to risk and ensure that agreed levels of continuity are maintained e) active participation in state wide pandemic planning forums, processes and activities f) developing and managing the ICT service continuity management plans to ensure that the recovery objectives of SA Health s regions, health units and agencies can be achieved g) managing the ICT service continuity plan including fail-over to a secondary location and restoration to the primary location h) performing business impact analyses for all existing and new services. 2. Ensure effective risk management practices are established to support ICT service continuity planning across the Health Portfolio through: a) evaluating the risks associated with identified business critical ICT systems and identifies priority areas for improvement b) performing post mortem reviews of ICT service continuity tests and instigating corrective actions where required c) ensuring that all ICT Services directorates are prepared and able to respond to an invocation of the continuity plans d) maintaining a comprehensive ICT testing schedule, including testing all continuity plans in line with business requirements and after every major business change e) undertaking quality reviews of all procedures and ensuring that these are incorporated into the testing schedule f) undertaking regular reviews of the ICT service continuity plans with the business areas to ensure that they accurately reflect the business needs g) assisting ICT Contracts and Performance Management directorate in the negotiation and management of contracts with providers of third party recovery services. 3. Contribute to the development of a culture and ethos that is outcome and performance focused regarding ICT service continuity planning through: a) development and implementation of quality improvement standards and measurement strategies for the ICT Security branch b) sound quality and performance management of external service providers, consultants, contractors, vendors and partners c) ensuring the highest standards of recruitment, development, performance management and succession planning are maintained and consistent with public sector standards d) development and implementation of appropriate business plans and processes for the ICT Security branch including service planning, design and resourcing e) financial planning, controlling, reporting and resource management Page 5 of 10
f) implementation of agreed performance indicators, and of quantitative and qualitative monitoring and reporting on service delivery outcomes. 4. Contribute to continuous service improvement with regard to ICT service continuity planning to align to SA Health s business and ICT Services strategic objectives through: a) redesigning services to transition from current ICT service continuity planning arrangements to a single ICT service performance model b) development and implementation of a model for ICT service continuity planning management and associated best practice tools, processes, standards and methodologies c) delivering improved service practices, processes and outcomes d) optimisation of ICT resources leveraging existing capability e) delivering economies of scale and efficiency savings ensuring sustainability and performance of ICT services f) aligning services to better meet business requirements g) establishment of a continuous improvement program and practices. 5. Contribute to the wellbeing of people in South Australia through participation in counter disaster activities including attendance, as required, at training programs and exercises to develop the necessary skills required to participate in responses in the event of a disaster and/or major incident. 6. Contribute to the promotion and implementation of the general public sector management aims, personnel management standards and employee conduct standards and in particular, equal opportunity and occupational health, safety and welfare by adhering to the provisions of relevant legislative requirements. Approved by line manager: / / Acknowledged by occupant: / / Page 6 of 10
PERSON SPECIFICATION To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed in the person specification are representative of the knowledge, skills, minimum education, training, licensure, experience, and/or ability required. ESSENTIAL MINIMAL REQUIREMENTS Educational/vocational qualifications Knowledge Demonstrated detailed knowledge of ICT service continuity planning and processes within a large, complex organisation Comprehensive knowledge of standards, tools, methods and processes in ICT service continuity planning and design Demonstrate effective interpersonal and, written and verbal, communication skills with a significant capacity to present complex concepts clearly and concisely. Experience Proven experience in ICT service continuity planning within a large, complex organisation Proven experience in establishing ICT service continuity planning processes and practices within a large, complex organisation Proven experience in the development of disaster recovery plans and ICT service continuity plans within a large, complex organisation Demonstrated effective interpersonal and written and verbal communication skills with a significant capacity to present complex concepts clearly and concisely. Professional & Technical Skills: Professional skill Skill definition Skill Requirement Continuity management The provision of service continuity planning and support. This includes the identification of information systems which support critical business processes, the assessment of risks to those systems' availability, integrity and confidentiality and the co-ordination of planning, designing, testing and maintenance procedures and contingency plans to address exposures and maintain agreed levels of continuity. This function should be performed as part of, or in close cooperation with, the function which plans business continuity for the whole organisation. Owns the service continuity planning process and leads the implementation of resulting plans. Coordinates the identification by specialists across the organisation of information and communication systems which support the critical business processes, and the assessment of risks to the availability, integrity, and confidentiality of those systems. Evaluates the critical risks associated with these systems and identifies priority areas for improvement. Coordinates the planning, designing, testing of maintenance procedures and contingency plans to address Page 7 of 10
Availability management Methods & tools Provides advice, assistance and leadership associated with the planning, design and improvement of service and component availability, including the investigation of all breaches of availability targets and service non-availability, with the instigation of remedial activities. Plans arrangements for disaster recovery together with supporting processes and manages the testing of such plans. Ensuring that appropriate methods and tools for the planning, development, testing, operation, management and maintenance of systems are adopted and used effectively throughout the organisation. exposure to risk and ensure that agreed levels of continuity are maintained. Provides advice, assistance and leadership associated with the planning, design and improvement of service and component availability, including the investigation of all breaches of availability targets and service nonavailability, with the instigation of remedial activities. Plans arrangements for disaster recovery together with supporting processes and manages the testing of such plans. Promotes and ensures use of appropriate techniques, methodologies and tools. Page 8 of 10
Business Skills: The Manager, ICT Continuity Planning will have the following personal and professional competencies Autonomy Influence Complexity Business skills Works under broad direction. Is fully accountable for own technical work and/or project/supervisory responsibilities. Receives assignments in the form of objectives. Establishes own milestones and team objectives, and delegates responsibilities. Work is often self-initiated. Influences organisation, customers, suppliers and peers within industry on the contribution of own specialism. Has significant responsibility for the work of others and for the allocation of resources. Makes decisions which impact on the success of assigned projects i.e. results, deadlines and budget. Develops business relationships with customers. Performs a challenging range and variety of complex technical or professional work activities. Undertakes work which requires the application of fundamental principles in a wide and often unpredictable range of contexts. Understands the relationship between own specialism and wider customer/organisational requirements. Advises on the available standards, methods, tools and applications relevant to own specialism and can make correct choices from alternatives. Analyses, diagnoses, designs, plans, executes and evaluates work to time, cost and quality targets. Communicates effectively, formally and informally, with colleagues, subordinates and customers. Demonstrates leadership. Facilitates collaboration between stakeholders who have diverse objectives. Understands the relevance of own area of responsibility/specialism to the employing organisation. Takes customer requirements into account when making proposals. Takes initiative to keep skills up to date. Mentors more junior colleagues. Maintains an awareness of developments in the industry. Analyses requirements and advises on scope and options for operational improvement. Demonstrates creativity and innovation in applying solutions for the benefit of the customer. Desirable Qualifications Relevant Postgraduate Degree Desirable Industry Certifications Relevant Security Certification Page 9 of 10
COMMITMENT TO WORKPLACE VALUES The Department of Health values have an influence on the people we employ Every organisation has values that govern the way people are treated and the way decisions are made. The Department s Strategic Plan identifies the values that guide our behaviours. These behaviours apply to all employees and govern the way people in the organisation are treated, the way decisions are made and how we provide our services. These values are used in day to day communication and interaction between all employees and are linked to the whole of government Code of Conduct, Performance Development, Job and Person Specifications and Department of Health Employment Conditions. Department of Health Organisational Values are: Honesty We show honesty by speaking truthfully, within the boundaries of confidentiality. This is shown in our dealings within the Department and with our consumers and partners by: saying what we mean and meaning what we say, keeping our promises, telling the truth tactfully, providing honest feedback and answers and admitting to mistakes. Respect We show respect by speaking and acting with courtesy. We treat others with dignity and use culturally appropriate ways of communicating. This is shown in our dealings within the Department and with our consumers and partners by: treating everyone fairly, communicating so people can understand, listening to others, and seeking and providing feedback. Integrity We show integrity by honouring our values and the rules of our department, government and nation. This is shown in our dealings within the department and with our consumers and partners by: doing the right thing, abiding by the values, standing up for what we believe in, and taking responsibility for our mistakes. ***************** I have the ability and commitment to behave consistently with the stated values of the Department of Health. / / Signature Please complete and return attached to your application to the nominated person The right people with the right skills in the right place at the right time Page 10 of 10