Information Security Specialist 2

Commonwealth of Pennsylvania • Dauphin County, PA

3d • Hybrid

About The Position

The Pennsylvania Liquor Control Board (PLCB) is seeking an Information Security Specialist 2 to oversee our vulnerability management program within the Information Technology Services (ITS) Security Office. In this role, you will help ensure that the agency’s technology systems remain resilient against both established and emerging threats. This is an opportunity to grow professionally while supporting a vital public mission. DESCRIPTION OF WORK This position supports the Pennsylvania Liquor Control Board by protecting information systems and analyzing cybersecurity risks. The role focuses on monitoring vulnerabilities, maintaining security standards, and strengthening technology safeguards. As an Information Security Specialist 2, you will perform the following duties: Vulnerability Oversight: Administer vulnerability management platforms and evaluate coverage Security Analysis: Analyze scan results, prioritize remediation activities, and track progress Performance Metrics: Determine key indicators, maintain dashboards, and quantify security measures Configuration Management: Create and maintain security configuration baselines Risk Evaluation: Review cybersecurity findings and assist with maintaining the agency risk register Compliance Support: Promote adherence to PCI-DSS, GAAP, Commonwealth policies, and industry standards

Requirements

• One year as an Information Security Specialist 1 (Commonwealth job title or equivalent Federal Government job title, as determined by the Office of Administration)
• Three years of experience performing technical work in information technology security, and an associate’s degree in any information technology field
• One year of experience performing technical work in information technology security, and a bachelor’s degree in any information technology field
• An equivalent combination of experience and training
• Two or more years of full-time professional experience using a vulnerability management platform
• Meet the PA residency requirement
• Be able to perform essential job functions
• Pass a background investigation
• No felony conviction within the last ten years of their prospective date of employment

Responsibilities

• Administer vulnerability management platforms and evaluate coverage
• Analyze scan results, prioritize remediation activities, and track progress
• Determine key indicators, maintain dashboards, and quantify security measures
• Create and maintain security configuration baselines
• Review cybersecurity findings and assist with maintaining the agency risk register
• Promote adherence to PCI-DSS, GAAP, Commonwealth policies, and industry standards

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree