What are the best practices for Data Security for Employee, Line Manager and Hiring Manager?

Summary:

The line manager has the roles assigned below.

1. Employee

2. Line manager

3. Hiring manager

Requirement:

When using the Jor Requisition function, the hiring manager should only see the related positions linked to his department and below in the department hierarchy.
What is the best Position Security Profile configuration that needs to be added to all these Abstract roles to achieve this requirement, keeping in mind that if I assign the defaulted one (view all position) Security Profile to one of them and a custom Position Security Profile for others, the view all position will override any restricted position Security Profile?