Coordinator, PeopleSoft Application Security

advertisement
Item 9.G-Mar. 20, 2009
ADMINISTRATIVE FACULTY POSITION DESCRIPTION QUESTIONNAIRE
To expedite and facilitate the PDQ review process, please send the PDQ and Org Chart electronically to
marshag@unr.edu for discussion and for initial review before routing PDQ for approval signatures.
Questions - call UNR-HR at 682-6114
*******************************************************************************************************************
INSTRUCTIONS: See http://www.unr.edu/vpaf/hr/compensation/placement.html for complete instructions.
*******************************************************************************************************************
Incumbent(s) Name (if applicable):
Position #(s):
Current Title: Coordinator, PeopleSoft Application Security
Current Range: 3
(JCC:86854;3J;CM5513;CC110;T66-275;E)
Department: Computing and Telecommunications
College/Division: Information Technology
Account #:
Action Proposed: (check all that apply)
( ) New position: Proposed Range:
Proposed Title:
( ) Title Change, Proposed Title:
( ) Proposed Reassignment from Range
to Range
(X) Revised PDQ only (no change in range or title)
( ) Line of Progression (show titles below)
Range:
JCC (HR assigned):
I certify that the statements in this description are accurate and complete to the best of my knowledge.
____________________________________________________________
Employee’s Signature
__________________
Date
I/we have reviewed the statements in this form and they accurately reflect the job assignments.
____________________________________________________________
Immediate Supervisor’s Signature
____________________________________________________________
Director/Chair/Dean
Jim McKinney
Director, Computing & Telecommunications
__________________
Date
__________________
Date
Approved for Salary Placement Committee review.
____________________________________________________________
__________________
Pres / Vice Pres / Vice Prov Signature Steven Zink
Date
Vice President, Information Technology
Action Approved by the President (Completed by Faculty HR):
Position #:
EEO Code:
CUPA Code:
Job Class Code:
Exempt: Yes or No Census Code:
Range:
Effective Date:
Approved Title:
____________________________________________________________
__________________
Employee Signature
Date
(Employee signs and sends to HR for personnel file after PDQ has been “final” stamped for approval)
Rev: 12/1/2008
Position Description – Coordinator, PeopleSoft Application Security
Page 2
1. Summary Statement: State the major function(s) of the position and its role in the
university. Attach an organizational chart with positions, ranges, and names for the division
which reflects the position in it as well as those supervised in the department. (This section is
used for advertisement of the position.)
The PeopleSoft Application Security Coordinator leads the enterprise-level application security effort
for UNR, working with the Enterprise Resource Planning (ERP) team to design the security module of
the PeopleSoft ERP system. The Coordinator supports the ongoing production maintenance and
phased rollout implementation of the ERP.
2. List the major responsibilities, including percentage of time devoted to each. Provide
enough detail to enable a person outside the department to understand the job (percentage
first with heading and then bulleted information).
45% - Security Analysis and Design
 Design security specifications; analyze and create specifications
 Work with functional area experts to determine security and permission settings that reflect
role-based user access needs
 Lead the development of security roles and profiles for end users
 Develop and implement the security design
 Test and audit proposed and existing security protocols
20% - Application Security Leadership
 Provide technical leadership for the security application process
 Assist the transition from paper based security approval processes in legacy systems to
electronically based security approval processes in a role-based application security
environment
 Monitor for non-compliance of established security policies and procedures and work with the
Project Manager to resolve issues
20% - Training/Communication/Support




Lead the development of application security training efforts
Develop appropriate communication strategies for a wide variety of campus constituents
Serve as third level support for IT Computing Help Desk
Work with application specialists and database administrators to ensure development projects
and database environments follow best practices for application security
10% - Policy and Procedure Development and Implementation
 Lead the development and implementation of application security polices and procedures
 Automate processes for application security approval and annual audits
5% - Research & Development
 Stay abreast of security risks within the application environment and contribute to the
development of solutions to mitigate the risk
3. Describe the level of freedom to take action and make decisions with or without
supervision and how the results of the work performed impact the department, division and/or
the university as a whole.
Impact of an error in creating a security role or assigning an individual to an incorrect role would result
in employees not having access to the data they need or having inappropriate access to sensitive
data. Failure to provide campus training and awareness programs related to application security
Position Description – Coordinator, PeopleSoft Application Security
Page 3
could result in data security breaches of sensitive information resulting in possible identity theft or
malicious administrative system activity.
4. Describe the knowledge, skills (to include cognitive requirement and verbal and written
communication), and abilities (to include task complexity, problem solving, creativity and
innovation) essential to successful performance of this job (in bullet format).
Knowledge of:
 Creation and maintenance of single, composite, and derived security roles
 ERP systems security with specific knowledge of PeopleSoft applications
 Student Information Systems or student data management in higher education environment
Skills:





Creation and maintenance of security training materials, manuals, bulletins and documentation
Creation and delivery of security demonstrations, presentations, and training classes
Interpersonal skills and commitment to service as an organizational value
Organizational skills
Team leadership
Ability to:
 Assist other application staff to develop core proficiencies within the application
 Develop, plan, and test security enhancements
 Develop and implement standard operating procedures and other documentation for security
procedures
 Create, maintain, and troubleshoot security problems in all development, test, and production
instances of the systems
 Work with and possibly lead teams of functional and technical staff to develop, implement, and
enforce security policies
 Manage multiple, complex projects simultaneously
5. Describe the type of personal contacts encountered in performing the duties of the job.
Explain the nature and purpose of these contacts: i.e., to provide services, to resolve
problems, to negotiate.
Internal
UNR departments and colleges
and ERP functional
representatives
Information Technology staff
External
NSHE application security
coordinators
ERP implementation consultants
and staff
Auditing teams
Reason for Contact
To develop and implement appropriate application security
measures for the ERP and to communicate to various
constituencies the importance of application security; train endusers on application security issues; assess data security risks;
investigate and mitigate security breaches
To collaborate on work assignments, resolve customer problems,
and ensure successful completion and ongoing maintenance of
projects
Reason for Contact
To develop consistent NSHE application security policies
To coordinate analysis, planning, maintenance, technical support;
to keep staff abreast of changing security risks and measures to
mitigate risk
To provide information required for security audits
Position Description – Coordinator, PeopleSoft Application Security
Page 4
6. Indicate the minimum qualifications which are necessary in filling this position should it
become vacant. Please keep in mind the duties/responsibilities of the position rather than the
qualifications of the incumbent.
a.
Minimum educational level, including appropriate field, if any.
Bachelor’s Degree from a regionally accredited institution
b.
Minimum type and amount of work experience, in addition to the above required
education necessary for a person entering this position.
Bachelor’s Degree and four years of experience supporting large-scale Enterprise
Resource Planning (ERP) and information technology related security
Preferred Licenses or Certifications: None
c.
Indicate any license or certificate required for this position.
None
Download