How do I create a Person Security Profile to restrict role access by department + business unit

Summary:

Content (please ensure you mask any confidential information):

How do I create a Person Security Profile to restrict role access by department + business unit, so that the person cannot see people from another business unit and also cannot see people from other departments (even within the same business unit)?

I want to restrict the HR specialist's access view by a specific business unit and department.

Version (include the version you are using, if applicable):

24c

Code Snippet (add any code snippets that support your topic, if applicable):