|
Commonwealth of Pennsylvania |
|
|
POSITION DESCRIPTION FOR JOB POSTING |
|
|
Position Number: 00307711 |
Description Activated On: 6/18/2026 11:28:12 AM |
Position Purpose: Describe the primary purpose of this position and how it contributes to the organization’s objectives. Example: Provides clerical and office support within the Division to ensure its operations are conducted efficiently and effectively. As a member of the Pennsylvania Liquor Control Board’s (PLCB) information technology (IT) security team, the incumbent safeguards the agency’s IT systems and data. They serve as the agency’s subject matter expert on vulnerability management. |
|
Description of Duties: Describe in detail the duties and responsibilities assigned to this position. Descriptions should include the major end result of the task. Example: Types correspondence, reports, and other various documents from handwritten drafts for review and signature of the supervisor. Serves as the administrator of the agency’s vulnerability management platforms. Identifies, assesses and reports on vulnerabilities across all systems. Closes coverage gaps. Provides analysis of vulnerability scan results. Prioritizes and tracks remediation efforts. Determines relevant vulnerability management metrics and key performance indicators. Develops and maintains dashboards and reports to quantify them. Creates and maintains security configuration baselines. Performs risk analysis of cybersecurity risk-related data points including audit findings, vulnerability findings and penetration test results. Assists in developing and maintaining an agency risk register. Works to ensure the PLCB is continually compliant with IT security requirements as defined by the Payment Card Industry Data Security Standard (PCI-DSS), Generally Accepted Accounting Principles (GAAP), Commonwealth policies and industry best practices. Gathers evidence in support of external audits. Manages and works with third-party penetration testers. Participates in secure code reviews of internal applications. Develops and maintains policies, procedures and other technical documentation. Assists with resolving trouble tickets assigned to IT security team. Stays current on emerging threats, industry trends and best practices. Utilizes provided training platforms for professional development. Performs other duties as assigned. |
Decision Making: Describe the types of decisions made by the incumbent of this position and the types of decisions referred to others. Identify the problems or issues that can be resolved at the level of this position, versus those that must be referred to the supervisor. Example: In response to a customer inquiry, this work involves researching the status of an activity and preparing a formal response for the supervisor’s signature. The incumbent exercises independent decision making while managing the agency’s vulnerability management platforms and performing other duties. Matters involving elevated risk, policy exceptions or significant operational impacts must be referred to higher level management for direction or approval. Work is reviewed for accuracy, timeliness, effectiveness and adherence to performance standards. |
||||||||||||||||||||
Requirements Profile: Identify any specific experience or requirements, such as a licensure, registration, or certification, which may be necessary to perform the functions of the position. Position-specific requirements should be consistent with a Special Requirement or other criteria identified in the classification specification covering this position. Example: Experience using Java; Professional Engineer License Experience: Licenses, registrations, or certifications: 1. N/A 2. N/A 3. N/A 4. 5. 6. |
||||||||||||||||||||
Essential Functions: Provide a list of essential functions for this position. Example: Transports boxes weighing up to 60 pounds.
|