05/01/1984 09960

LOTTERY SECURITY DIRECTOR

DEFINITION: This is highly responsible technical and administrative work in directing the systems and operational security functions of the Pennsylvania Lottery.

An employee in this class is responsible for the overall direction, planning, implementation, coordination and centralization of all security matters pertaining to the Pennsylvania Lottery. Work involves developing detailed security plans for each lottery game; directing and supervising implementation of the plans; coordinating the various related activities between state and vendor personnel; and providing for personnel training and review procedures as required. Work also involves the responsibility for implementing and monitoring security related policies and guidelines pertaining to all computer oriented issues including both physical and data security aspects; establishing guidelines in support of policies for information control and security; and monitoring the implementation and administration of security facilities provided for use with system software including password administration, access level authorizations, and command level authorization. Work includes planning and coordinating the overall security for the Daily Number, Big 4, Lotto, and Instant games drawings which includes maintaining security control over security room keys and access cards; obtaining preliminary background and follow-up investigative information on lottery, television and C.P.A. personnel; and reviewing all drawing procedures, including the mathematical confidence level tests, for strict conformance to security standards. Work also includes serving on the staff committees for lottery games development including research, design, and promotion; coordinating with vendor in preparing working papers detailing the specifications of each game, and approving or obtaining approval; and planning and supervising implementation of security requirements for the production of each game, in conjunction with vendor. Work is performed with a high degree of initiative and independent judgment under the general direction of the deputy executive director and is reviewed through reports and conferences for overall program effectiveness.

EXAMPLES OF WORK: Plans, directs, coordinates and implements all security matters pertaining to the Pennsylvania Lottery.

Develops detailed security plans for each Lottery game and supervises implementation of the plan.

Develops and implements security guidelines and policies for lottery computer related issues including both physical and data security.

Ensures appropriate training for both lottery and vendor employees.

Reviews all lottery drawing procedures, including the mathematical confidence level tests, for proper procedural and security methods.

Establishes guidelines in support of policies for information control and security and monitors the implementation and administration of security facilities provided for use with system software.

Coordinates disaster recovery plans to ensure they are adequate to sustain and recover critical systems services in the event of a catastrophic data processing failure.

Requests and assigns priorities to routine and special investigations and coordinates same through the Deputy Secretary for Enforcement.

Serves on the staff committee for Lottery game development including promotions, research, and incentive games, and coordinates with the vendor in preparation of working papers detailing specifications of each game and approves or obtains necessary approval.

Evaluates employee performance and prepares and signs employee Performance Evaluation Reports.

Receives grievances and complaints, conducts initial investigation into causes and conditions, discusses with employee, and resolves or recommends solutions to grievances and complaints.

Approves leave requests and reviews sick leave usage of subordinates to determine if pattern of abuse exists.

Performs related work as required.

REQUIRED KNOWLEDGES, SKILLS, AND ABILITIES: Knowledge of security principles and practices.

Knowledge of the Commonwealth's lottery law and rules and regulations.

Knowledge of electronic data processing principles and practices.

Knowledge of the principles of lottery games development, statistical probability theory, lottery drawing procedures, and promotional concepts.

Knowledge of supervisory principles and practices.

Knowledge of the principles and practices of public administration.

Ability to exercise significant initiative and ingenuity in the identification of security areas which require deeper exploration and investigation.

Ability to express ideas clearly and concisely, orally and in writing.

Ability to establish and maintain effective working relationships with vendors, media executives, electronic data processing representatives and/or the general public and to deal tactfully with controversial public relations problems.

Ability to supervise work activities of subordinates effectively.

MINIMUM EXPERIENCE AND TRAINING: Eight years of progressively responsible assignments in the security management field which includes experience with data systems security needs;

                                                                                                                                                            or

Six years of experience as a Lottery supervisor or manager which includes involvement with Lottery game concepts and drawing procedures;

                                                                                                                                                            or

Any equivalent combination of experience and training.