Free Response in Opposition to Motion - District Court of Arizona - Arizona

EXHIBIT 2

Case 2:04-cv-00332-JWS

Document 58-3

Filed 03/13/2006

Page 1 of 4

AdvancePCS POSITION DESCRIPTION
TITLE: Sailor Information Security Analyst DEPARTMENT: Information Security DATE:

DIVISION: Executive REPORTS TO: Manager, Info. Sec. Admin.

L

POSITION SUMMARY:
· Directly administers multiple information system security products potentially including CA-ACF2, Tandem Guardian/Safeguard, Windows NT, OS/400, ADC, Solaris, HP-UX, and Lotus Notes. · Provides information security "help desk" assistance in support of internal and external customers. · Directly (or through supervision of delegated authority) administers application security potentially including web-based applications, MVS/CICS applications, batch jobs, on-line applications under OS/400 or Tandem, or other network applications. · Reviews appropriate security logs and follows up on suspected violations. · Supports overall Information Security Organization as member of teams/taskforces as assigned · Shift work is a possibility.

Note: Information contained in this section will be used for the position summary portion on job postingsfor this position.

II. POSITION RESPONSIBILITIES: (Be specific. Include aiy physical demands required to perform an essential function.)

Responsibility System Security Administration

% of Time

Meets Guidelines'" 1 (potential for administrative, civil, and criminal penalties), 2, 3.4.5 l(systemic noncompliance-- potential for administrative, civil, and criminal benaltiesX 3^4 · 1 (systemic noncompliance--
potential fi»r AHminisJrafivft, civil,

50 10 10

Document Procedures Review Security Logs & Follow up

and criminal penalties'). 2. 31 4 Participate on ISO teams/taskforces 3&4 30 For responsibilities that are essential job functions, please note the codes listed below which are applicable.

V^^^--····B--^--^·«H.«B-BWI«M«M«IHMIMMMH«^-A>HMA«l>*^_-^--««.~«B^^BV««^----B«-^^S^Vl^^H^^M.^MBHH.^B^HM.^vv^M^^BIM_MBHB^bH^^£^^_^^K^WB^HlBHVHBHB^^_.v_

Job description--Senior Analyst ISA - Final

EEOC050/ /

Case 2:04-cv-00332-JWS

Document 58-3

Filed 03/13/2006

Page 2 of 4

'-S

AdvancePCS POSITION DESCRIPTION
Guidelines for Determining Essential Functions: Code

1. 2. 3. 4. 5.

Failure to perform this function may have serious consequences. (List consequences) Elimination of this function would fundamentally alter toe position. There are limited employees among whom the performance of the function could be distributed. This function is highly specialized; employees are hired for their skill/ability to perform this function. This job responsibility occupies a great deal of the employee's time.

Revised: New:

Exempt: Non-Ex:

Grade: Date:

HI. POSITION REQUIREMENTS:
SPECIALIZED SKILLS, KNOWLEGE AND ABILITIES: Please list required and desired knowledge, skills and abilities. Include equipment required to operate. Note: Information contained in this section wH be used for the qualifications required portion on job postings for Air position. QUALIFICATIONS: REQUIRED: · Systems Security Certified Practitioner (SSCP) or Certified Information Systemsr Security Professional (CISSP) · Experience with security software products including: CAACF2 Tandem's Safeguard and Guardian OS/400 (integral security software) Windows/NT and Windows/2000 NT AK, Solaris, HP-UX or similar Unix security Lotus Notes · Excellent client relationship skills DESIRED: · Experience with healthcare, especially pharmacy . · · Active participation in one or more of the following organizations (or equivalent): v · Information Systems Security Association (ISSA) · ACE2 User Group · Computer Security Institute (CSI)

Job description-Senior Analyst ISA - Final
EEOC051

Case 2:04-cv-00332-JWS

Document 58-3

Filed 03/13/2006

Page 3 of 4

AdvancePCS POSITION DESCRIPTION
EDUCATION: - Please check highest level of formal education required (R) or desirable CD). = Note: Information contained in this section will be used for the educational requirement portion on job postings for this position. EDUCATION: Less than High School High School Post High School or specialized training
College BA/BS Degree

FIELD:

R

D

N/A N/A
Computer technology

j, V

V

Advanced Degree License or Certification PBM Experience CISSP/SSCP

V . V

·

In addition to education (or equivalent experience) listed above, please describe briefly any further work experience required to perform the position's responsibilities (includeminimum number of years experience and in what field). Note: Information contained in this section vriU be used for the prior experience needed portion on job postings for this position. · 6-8 + years of information security practitioner experience · 3-f years of product-specific system security experience (may be included within the 6-8+ above) PROFICIENCY LEVEL: The level of proficiency or development within the profession or specialized field (technical or managerial) required to perform the position responsibilities. | | Entry (acquiring practical experience, performing less difficult assignments) . 1 j | | Date

| V | Journey (fully qualified, works independently on assignments of standard difficulty) | I | Advanced (performs complex assignments, gives technical guidance to Journey level) | Expert (applies expert knowledge as internal consultant, Date Human Resources researcher)

Supervisor/Manager

Job description-Senior Analyst ISA - Final

Case 2:04-cv-00332-JWS

Document 58-3

Filed 03/13/2006

Page 4 of 4

EEOC052