CJIS-Savvy Business Analyst & Security Lead

State of Utah; West Jordan (UT); On-site; USD 71,000 - 112,000; Full time

Benefits offered by this job

Job Stability

Career Growth

Meaningful Work

Supportive Work Environment

Job summary

The State of Utah’s Department of Corrections seeks a strategic leader to serve as a Business Analyst Software Administrator and Information Security Officer (ISO). You will oversee the business-side data stewardship for enterprise applications and act as the primary operational lead for cybersecurity, CJIS policy enforcement, incident response, and risk management relating to Criminal Justice Information.

As SME and liaison between agency leadership, divisions, and the Division of Technology

Qualifications

• CJIS & FBI CJIS Security Policy, FIPS, NIST controls, RSA Archer or similar GRC platforms.
• Ability to evaluate complex workflows, test configurations, and audit access controls.
• Lead incident response workflows, remediation, and reporting to authorities.
• Translate regulatory requirements into actionable business rules for stakeholders.

Responsibilities

• Policy Oversight & Regulatory Compliance: lead on FBI CJIS Security Policy and NIST controls; ensure agency software, networks, and spaces align with mandates.
• Audit Management: prepare for audits, collect evidence, and perform CAPs/POA&Ms for security deficiencies.
• Incident Response: oversee detection, containment, and remediation of security incidents involving CJI; escalate as needed.
• A&A: manage security packages in RSA Archer; ensure cloud solutions meet encryption, SOC 2, FedRAMP/GovRAMP.
• Vendor Security Oversight: verify contractors meet CJIS terms and background screening requirements.

Skills

CJIS & Info Security

System & Analytical Thinking

Security Incident Lead

Communication & Liaison

Tools

DbVisualizer

PuTTY

Job description

The State of Utah’s Department of Corrections seeks a strategic leader to serve as a Business Analyst Software Administrator and Information Security Officer (ISO). You will oversee the business-side data stewardship for enterprise applications and act as the primary operational lead for cybersecurity, CJIS policy enforcement, incident response, and risk management relating to Criminal Justice Information.

As SME and liaison between agency leadership, divisions, and the Division of Technology