Information Security Specialist 2

Commonwealth-of-Pennsylvania; Harrisburg (Dauphin County); Hybrid; USD 70,000 - 90,000; Full time

Job summary

Commonwealth of Pennsylvania seeks an Information Security Specialist 2 to oversee the vulnerability management program within the ITS Security Office. The role focuses on monitoring vulnerabilities, assessing risks, and strengthening safeguards across agency systems.

You will work to promote PCI-DSS adherence, maintain security baselines, and support risk management efforts while ensuring PA residency requirements are met. Telework options may apply with in-office obligations.

Qualifications

• One year as an Information Security Specialist 1 or three years in IT security with an associates degree or one year with a bachelor’s degree in IT
• Equivalent combination of experience and training accepted.

Responsibilities

• Oversee vulnerability management platforms and evaluate coverage
• Analyze scan results, prioritize remediation activities, and track progress
• Determine key security metrics, maintain dashboards and quantify security measures
• Create and maintain security configuration baselines
• Review cybersecurity findings and assist with the risk register
• Promote adherence to PCI-DSS, GAAP, Commonwealth policies, and industry standards

Skills

Vulnerability management

Security monitoring

Threat analysis

Education

Associate’s degree in IT

Bachelor’s degree in IT

Job description

The Pennsylvania Liquor Control Board (PLCB) is seeking an Information Security Specialist 2 to oversee our vulnerability management program within the Information Technology Services (ITS) Security Office. In this role, you will help ensure that the agency’s technology systems remain resilient against both established and emerging threats. This is an opportunity to grow professionally while supporting a vital public mission.

This position supports the Pennsylvania Liquor Control Board by protecting information systems and analyzing cybersecurity risks. The role focuses on monitoring vulnerabilities, maintaining security standards, and strengthening technology safeguards. As an Information Security Specialist 2, you will perform the following duties:

• Vulnerability Oversight: Administer vulnerability management platforms and evaluate coverage
• Security Analysis: Analyze scan results, prioritize remediation activities, and track progress
• Performance Metrics: Determine key indicators, maintain dashboards, and quantify security measures
• Configuration Management: Create and maintain security configuration baselines
• Risk Evaluation: Review cybersecurity findings and assist with maintaining the agency risk register
• Compliance Support: Promote adherence to PCI-DSS, GAAP, Commonwealth policies, and industry standards

Work Schedule and Additional Information:

• Full-time employment
• Work hours are 8:00 AM to 4:30 PM, Monday - Friday, with 60-minute lunch.
• Telework: You may have the opportunity to work from home (telework) part-time, up to four days a week, with one day per week in the Northwest Office Building in Harrisburg. In order to telework, you must have a securely configured high-speed internet connection and work from an approved location inside Pennsylvania. If you are unable to telework, you will have the option to report to the headquarters office in Harrisburg. The ability to telework is subject to change at any time. Additional details may be provided during the interview.
• Salary:In some cases, the starting salary may be non-negotiable.
• You will receive further communication regarding this position via email. Check your email, including spam/junk folders, for these notices.

QUALIFICATIONS

Minimum Experience and Training Requirements:

• One year as an Information Security Specialist 1 (Commonwealth job title or equivalent Federal Government job title, as determined by the Office of Administration); or
• Three years of experience performing technical work in information technology security, and an associate’s degree in any information technology field; or
• One year of experience performing technical work in information technology security, and a bachelor’s degree in any information technology field; or
• An equivalent combination of experience and training.

Other Requirements:

• This particular position also requirestwo or more years of full-time professional experience using a vulnerability management platform.
• You must meet the PA residency requirement. For more information on ways to meet PA residency requirements, follow the link and click on Residency.
• You must be able to perform essential job functions.

Legal Requirements:

• You must pass a background investigation. An applicant with a felony conviction within the last ten years of their prospective date of employment is not permitted to work for the PLCB, per section 210(c) of the Pennsylvania Liquor Code. Other criminal convictions will be reviewed on a case‑by‑case basis.

Veterans:

• Pennsylvania law (51 Pa. C.S. §7103) provides employment preference for qualified veterans for appointment to many state and local government jobs. To learn more about employment preferences for veterans, go to www.pa.gov/agencies/employment/how-to-apply.html and click on Veterans.

Telecommunications Relay Service (TRS):

• 711 (hearing and speech disabilities or other individuals).

The Commonwealth is an equal employment opportunity employer and is committed to a diverse workforce. The Commonwealth values inclusion as we seek to recruit, develop, and retain the most qualified people to serve the citizens of Pennsylvania. The Commonwealth does not discriminate on the basis of race, color, religious creed, ancestry, union membership, age, gender, sexual orientation, gender identity or expression, national origin, AIDS or HIV status, disability, or any other categories protected by applicable federal or state law. All diverse candidates are encouraged to apply.

• Completing the application, including all supplemental questions, serves as your exam for this position. No additional exam is required at a test center (also referred to as a written exam).
• Your score is based on the detailed information you provide on your application and in response to the supplemental questions.
• Your score is valid for this specific posting only.
• You must provide complete and accurate information or:
  • your score may be lower than deserved.
  • you may be disqualified.
• You may only apply/test once for this posting.
• Your results will be provided via email.