Penn State Job Catalog

The defined natural career progression within or between job profiles.

Cyber Security Analysis

The Cyber Information Assurance Analyst proactively evaluates the system and network enterprise environments of University units and uses technical knowledge and analytical skill to determine the optimum mix of technology, policy, procedures, and education to implement effective cyber security programs and strategies; determines security controls, configurations, procedures, and policies based off industrial standards, best practices, University, federal, and state regulations, and contractual requirements; establishes and manages program control processes and compliance assessments to determine deviations from acceptable configurations, policy, or standards; assists with the identification and mitigation of risk posed to the confidentially, integrity, and availability of information systems.

• Conduct risk assessments and provide recommendations for system, network, and application design, implementation, and operation of departmental systems
• Conduct vulnerability assessments of departmental systems and networks to identify deviations from acceptable configurations or policies
• Monitor the corrective actions of departmental system audits; draft documentation of Plan of Action and Milestones (POAM) for review
• Meet with stakeholders regularly to assess needs and requirements at a departmental level
• Obtain certification and accreditation for departmental systems through the creation of process documentation support; may assist with unit or University wide process documentation
• Establish program control processes to ensure risk mitigation
• Perform periodic audits of systems
• Implement required policies, procedures, and configurations; make recommendations for improvements
• Develop requirements and procedures for forensic preservation
• Research and stay current on industry best practices

Level:

– Senior Supervisor

Base Description:

– Supervises direct reports, but primarily completes activities, tasks, and/or projects of a functional nature.

Level Summary:

– Demonstrates comprehensive knowledge to perform own work; spends majority of time on tasks related to own job responsibilities. May demonstrate subject matter expertise. Demonstrates intermediate to advanced planning, organizing, directing, and facilitating skills. Demonstrates the ability to coach assigned employees. Assigns and reviews completed work to verify accuracy, quality, and adherence to professional standards. Trains, coaches, mentors, and motivates staff. Anticipates potential problems, issues, and opportunities; researches and recommends solutions within defined policies. May develop creative recommendations for solving problems.

Supervisory Responsibilities:

– Typically oversees at least 2 full–time direct reports or equivalent team of part–time and/or student workers (for Professional track, performs work at the Senior Professional level or higher)

Fiscal Responsibilities:

– May validate and pay invoices
– Monitors and tracks budgets for specific area and/or grant(s)
– May assist in planning and forecasting budgets

Problem Solving:

– Encounters moderately complex problems
– Applies general precedents and practices and specialized knowledge and skills to resolve problems
– Understands benefits, limitations and impact of potential solutions
– Anticipates potential problems and recommends possible solutions within general guidelines

Independence of Action:

– Works independently on moderately complex work assignments, reviews progress, and evaluates results
– Organizes work of direct reports and sets team priorities
– Reviews the work of others to verify accuracy, quality, and adherence to professional standards

Communication and Collaboration:

– Communicates internally within working unit and the University
– Communicates with external audiences for scheduling/coordination
– May communicate with external audiences for business purposes
– Collaborates closely with team members; may interact with other staff outside of area
– Utilizes a communication style that is appropriate for a given situation
– Interprets and communicates information, ideas and instructions clearly, accurately and persuasively both verbally and in written materials intended for distribution

• Comp Grade – 13
• Minimum – $86,300.00
• MidPoint – $107,900.00
• Maximum – $129,500.00