Item 9.G-Mar. 20, 2009 ADMINISTRATIVE FACULTY POSITION DESCRIPTION QUESTIONNAIRE To expedite and facilitate the PDQ review process, please send the PDQ and Org Chart electronically to marshag@unr.edu for discussion and for initial review before routing PDQ for approval signatures. Questions - call UNR-HR at 682-6114 ******************************************************************************************************************* INSTRUCTIONS: See http://www.unr.edu/vpaf/hr/compensation/placement.html for complete instructions. ******************************************************************************************************************* Incumbent(s) Name (if applicable): Position #(s): Current Title: Coordinator, PeopleSoft Application Security Current Range: 3 (JCC:86854;3J;CM5513;CC110;T66-275;E) Department: Computing and Telecommunications College/Division: Information Technology Account #: Action Proposed: (check all that apply) ( ) New position: Proposed Range: Proposed Title: ( ) Title Change, Proposed Title: ( ) Proposed Reassignment from Range to Range (X) Revised PDQ only (no change in range or title) ( ) Line of Progression (show titles below) Range: JCC (HR assigned): I certify that the statements in this description are accurate and complete to the best of my knowledge. ____________________________________________________________ Employee’s Signature __________________ Date I/we have reviewed the statements in this form and they accurately reflect the job assignments. ____________________________________________________________ Immediate Supervisor’s Signature ____________________________________________________________ Director/Chair/Dean Jim McKinney Director, Computing & Telecommunications __________________ Date __________________ Date Approved for Salary Placement Committee review. ____________________________________________________________ __________________ Pres / Vice Pres / Vice Prov Signature Steven Zink Date Vice President, Information Technology Action Approved by the President (Completed by Faculty HR): Position #: EEO Code: CUPA Code: Job Class Code: Exempt: Yes or No Census Code: Range: Effective Date: Approved Title: ____________________________________________________________ __________________ Employee Signature Date (Employee signs and sends to HR for personnel file after PDQ has been “final” stamped for approval) Rev: 12/1/2008 Position Description – Coordinator, PeopleSoft Application Security Page 2 1. Summary Statement: State the major function(s) of the position and its role in the university. Attach an organizational chart with positions, ranges, and names for the division which reflects the position in it as well as those supervised in the department. (This section is used for advertisement of the position.) The PeopleSoft Application Security Coordinator leads the enterprise-level application security effort for UNR, working with the Enterprise Resource Planning (ERP) team to design the security module of the PeopleSoft ERP system. The Coordinator supports the ongoing production maintenance and phased rollout implementation of the ERP. 2. List the major responsibilities, including percentage of time devoted to each. Provide enough detail to enable a person outside the department to understand the job (percentage first with heading and then bulleted information). 45% - Security Analysis and Design Design security specifications; analyze and create specifications Work with functional area experts to determine security and permission settings that reflect role-based user access needs Lead the development of security roles and profiles for end users Develop and implement the security design Test and audit proposed and existing security protocols 20% - Application Security Leadership Provide technical leadership for the security application process Assist the transition from paper based security approval processes in legacy systems to electronically based security approval processes in a role-based application security environment Monitor for non-compliance of established security policies and procedures and work with the Project Manager to resolve issues 20% - Training/Communication/Support Lead the development of application security training efforts Develop appropriate communication strategies for a wide variety of campus constituents Serve as third level support for IT Computing Help Desk Work with application specialists and database administrators to ensure development projects and database environments follow best practices for application security 10% - Policy and Procedure Development and Implementation Lead the development and implementation of application security polices and procedures Automate processes for application security approval and annual audits 5% - Research & Development Stay abreast of security risks within the application environment and contribute to the development of solutions to mitigate the risk 3. Describe the level of freedom to take action and make decisions with or without supervision and how the results of the work performed impact the department, division and/or the university as a whole. Impact of an error in creating a security role or assigning an individual to an incorrect role would result in employees not having access to the data they need or having inappropriate access to sensitive data. Failure to provide campus training and awareness programs related to application security Position Description – Coordinator, PeopleSoft Application Security Page 3 could result in data security breaches of sensitive information resulting in possible identity theft or malicious administrative system activity. 4. Describe the knowledge, skills (to include cognitive requirement and verbal and written communication), and abilities (to include task complexity, problem solving, creativity and innovation) essential to successful performance of this job (in bullet format). Knowledge of: Creation and maintenance of single, composite, and derived security roles ERP systems security with specific knowledge of PeopleSoft applications Student Information Systems or student data management in higher education environment Skills: Creation and maintenance of security training materials, manuals, bulletins and documentation Creation and delivery of security demonstrations, presentations, and training classes Interpersonal skills and commitment to service as an organizational value Organizational skills Team leadership Ability to: Assist other application staff to develop core proficiencies within the application Develop, plan, and test security enhancements Develop and implement standard operating procedures and other documentation for security procedures Create, maintain, and troubleshoot security problems in all development, test, and production instances of the systems Work with and possibly lead teams of functional and technical staff to develop, implement, and enforce security policies Manage multiple, complex projects simultaneously 5. Describe the type of personal contacts encountered in performing the duties of the job. Explain the nature and purpose of these contacts: i.e., to provide services, to resolve problems, to negotiate. Internal UNR departments and colleges and ERP functional representatives Information Technology staff External NSHE application security coordinators ERP implementation consultants and staff Auditing teams Reason for Contact To develop and implement appropriate application security measures for the ERP and to communicate to various constituencies the importance of application security; train endusers on application security issues; assess data security risks; investigate and mitigate security breaches To collaborate on work assignments, resolve customer problems, and ensure successful completion and ongoing maintenance of projects Reason for Contact To develop consistent NSHE application security policies To coordinate analysis, planning, maintenance, technical support; to keep staff abreast of changing security risks and measures to mitigate risk To provide information required for security audits Position Description – Coordinator, PeopleSoft Application Security Page 4 6. Indicate the minimum qualifications which are necessary in filling this position should it become vacant. Please keep in mind the duties/responsibilities of the position rather than the qualifications of the incumbent. a. Minimum educational level, including appropriate field, if any. Bachelor’s Degree from a regionally accredited institution b. Minimum type and amount of work experience, in addition to the above required education necessary for a person entering this position. Bachelor’s Degree and four years of experience supporting large-scale Enterprise Resource Planning (ERP) and information technology related security Preferred Licenses or Certifications: None c. Indicate any license or certificate required for this position. None