Position Security Profile for HR with Global Access but Restricted Access

Summary:

We’re working on configuring a Position Security Profile and need guidance on a specific requirement.

We want to create a profile for an HR user that allows them to:

• Access all positions globally
• But restrict access to:
  • HR positions in countries other than their own
  • Few leader member positions

Has anyone implemented a similar setup? Specifically, we’re looking for best practices or configuration tips on:

We tried to create a position security profile and use position list and exclude them however it is now working as expected and also new positions can be created so this won't be a great approach.