Business Analyst Software Administrator

State of Utah; West Jordan (UT); On-site; USD 71,000 - 112,000; Full time

Benefits offered by this job

Job Stability

Career Growth

Meaningful Work

Supportive Work Environment

Job summary

The State of Utah’s Department of Corrections seeks a strategic leader to serve as a Business Analyst Software Administrator and Information Security Officer (ISO). You will oversee the business-side data stewardship for enterprise applications and act as the primary operational lead for cybersecurity, CJIS policy enforcement, incident response, and risk management relating to Criminal Justice Information.

As SME and liaison between agency leadership, divisions, and the Division of Technology

Qualifications

• CJIS & FBI CJIS Security Policy, FIPS, NIST controls, RSA Archer or similar GRC platforms.
• Ability to evaluate complex workflows, test configurations, and audit access controls.
• Lead incident response workflows, remediation, and reporting to authorities.
• Translate regulatory requirements into actionable business rules for stakeholders.

Responsibilities

• Policy Oversight & Regulatory Compliance: lead on FBI CJIS Security Policy and NIST controls; ensure agency software, networks, and spaces align with mandates.
• Audit Management: prepare for audits, collect evidence, and perform CAPs/POA&Ms for security deficiencies.
• Incident Response: oversee detection, containment, and remediation of security incidents involving CJI; escalate as needed.
• A&A: manage security packages in RSA Archer; ensure cloud solutions meet encryption, SOC 2, FedRAMP/GovRAMP.
• Vendor Security Oversight: verify contractors meet CJIS terms and background screening requirements.

Skills

CJIS & Info Security

System & Analytical Thinking

Security Incident Lead

Communication & Liaison

Tools

DbVisualizer

PuTTY

Job description

FT / PT Status – Full-Time
Benefits Eligibility – This position is eligible for a full benefits package.
Salary – $33.96 - $54.07 Hourly Wage
Remote Work / In-Office – In-Office / On-Site
Application Deadline – 10/21/2026*

Key Responsibilities

The Utah Department of Corrections (UDC) is seeking a strategic, highly conscientious leader to serve as a Business Analyst Software Administrator and Information Security Officer (ISO) . In this pivotal role, you will lead the business-side data stewardship of the agency’s enterprise applications, while serving as the primary operational lead for cybersecurity, CJIS policy enforcement, incident response, and risk management regarding Criminal Justice Information (CJI).

As the core Subject Matter Expert (SME) and strategic liaison between UDC leadership, internal divisions, and the Division of Technology Services (DTS), you will ensure robust data security, data governance, and strict compliance with state and federal security mandates.

Key Responsibilities

• Policy Oversight & Regulatory Compliance: Act as the internal expert and operational lead on the FBI CJIS Security Policy and NIST controls; ensure all agency software applications, networks, and physical spaces strictly align with state and federal security mandates.
• Audit Management & Corrective Actions: Lead pre-audit preparation, coordinate evidence collection, and represent the agency during triennial CJIS/FBI compliance audits and state technical reviews; author and execute Corrective Action Plans (CAPs) and Plans of Action and Milestones (POA&Ms) to remediate identified security deficiencies.
• Incident Response & Security Escalation: Oversee the detection, documentation, containment, and eradication of security incidents or unauthorized disclosures involving CJI; promptly escalation breaches to the CJIS Systems Officer (CSO), the FBI, and DTS security teams.
• Assessment & Authorization (A&A): Manage and maintain security packages within RSA Archer; complete DTS Form 524/525 Security Risk Assessments and ensure hosted cloud solutions (AWS/GCP) adhere to FIPS 140-2/140-3 encryption standards, SOC 2 attestations, and FedRAMP/GovRAMP frameworks.
• Vendor & Contractor Security Oversight: Partner with Local Agency Security Officers (LASOs) to verify that third-party contractors, software vendors, and external partners meet CJIS Security Addendum terms, background screening requirements, and data sharing restrictions before accessing agency systems.

Software System Administration & Data Stewardship

• System Administration & Workflow Configuration: Manage business-side setups, client-side security roles, permission matrices, and workflow parameters for core agency platforms, including offender management systems (SIMON, O-Track) and document repositories (UDOCA/Knowvation).
• Committee Leadership & DTS Liaison: Chair the SIMON Steering Committee and co-chair the UDOCA Steering Committee; serve as the primary operational liaison to DTS developers and hosting teams to prioritize system updates, resolve application bugs, and review weekly error reports.
• Access Control & Lifecycle Auditing: Direct user provisioning, de-provisioning, and scheduled access audits across all business software, Active Directory, VPN groups, and hardware authentication tokens (YubiKeys); enforce the principle of least privilege and ensure prompt termination processing for departing personnel.
• Data Quality & Analytics Validation: Utilize SQL tools (e.g., DbVisualizer, PuTTY) to query database structures, validate system data, resolve transaction errors, and oversee enterprise workflow data assets.

Key Qualifications & Core Competencies

• CJIS & Information Security Mastery: Deep technical and policy expertise regarding the FBI CJIS Security Policy, FIPS encryption standards, NIST security controls, and GRC platforms (e.g., RSA Archer).
• System & Analytical Thinking: Proven ability to evaluate complex operational workflows, logic-test application configurations, and run database queries to audit role-based access controls.
• Security Incident Lead: Demonstrated experience leading incident response workflows, conducting vulnerability remediations, and reporting security events to governing authorities.
• Communication & Strategic Liaison: Exceptional skill in translating complex cybersecurity regulations and technical configurations into actionable business rules for non-technical stakeholders, executive leadership, and IT engineering teams.

Location

8523 South Redwood Rd
West Jordan, Utah, 84088
United States

Background Check Required

A comprehensive background investigation, which may include a polygraph, may be required.

Drug Test Required

Yes

Schedule Code

B - Competitive Career Service

Benefits

In Utah, we believe hard work is important, but balance is essential. Finding work/life balance is a vital element to our culture. To find out more about WHY Utah , click here.

• Job Stability: Enjoy the security and reliability of employment within a well-established organization.
• Career Growth: Develop valuable skills and gain opportunities for leadership within a large organization.
• Meaningful Work: Contribute to an important service that benefits the community and supports organizational goals.
• Supportive Work Environment: Be part of a team that values cooperation, strong work ethics, and mutual support.

The Agency

The Utah Department of Corrections as a dedicated team of professionals ensures public safety by effectively managing offenders while maintaining close collaboration with partner agencies and the community. Our team is devoted to providing maximum opportunities for offenders to make lasting changes through accountability, treatment, education, and positive reinforcement within a safe environment. For additional information about the Utah Department of Corrections please go to this link. http://www.corrections.utah.gov/

EEO Statement

The State of Utah is committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. For accommodations, please contact [phone].