Custom Job Role was able to see data in the Person Management page

Summary:

We have created a custom job role called Rewards Manager which was derived from the Human Resource Analyst and Compensation Manager job roles. Upon testing the role, we found out that it could search and see employee data in the Person Management page even though no security policies were setup for the said job role. We have compared its Data Security Policies with that of the Human Resource Analyst and Compensation Manager job roles and it seems to be the same. However, both the Human Resource Analyst and Compensation Manager job roles were unable to search and see data under