Sign on as QSECOFR. Enter the command WRKUSRPRF. If there is a user profile that you want to copy, put a 3 next to it and press ENTER. Make whatever changes are necessary (be sure to look at all the screens) and hit ENTER. If you want to start from scratch, put a 1 next to the blank line at the top of the screen, hit ENTER, and fill in the desired parameters.
If you sign on as QSECOFR, use it only to create another *SECOFR profile. Then, sign off QSECOFR and sign back on as the new local security officer. Then follow the above instructions.
As far as possible, do not use QSECOFR for normal day to day activities. Ideally, disable QSECOFR and only use it when IBM instructions tell you to use it.