CJIS Compliance Officer

Johns Hopkins Public Safety is seeking aCJIS Compliance Officer who will be responsible for ensuring the Johns Hopkins Police Department (JHPD) adheres to all local, state, and federal regulations regarding the use, access, and management of criminal justice information systems. This role involves implementing compliance programs, conducting regular audits, providing training, and staying current with evolving CJIS policies and procedures.

The CJIS Compliance Officer is responsible for the implementation, direction, and execution of a highly sophisticated security program for the agency and its partners, which includes Johns Hopkins Public Safety (JHPS) IT, JHPS sworn officers, and other state, local, and federal agencies, as well as vendors and contractors. While the CJIS Compliance Officer reports to the Johns Hopkins Public Safety Senior Director of Information Technology, they are expected to use independent judgement and initiative to achieve their detailed duties.

Specific Duties and Responsibilities

• Develop, implement, and manage the CJIS compliance program for the JHPD.
• Create and update policies and procedures related to the management and security of CJIS data.
• Ensure the JHPD complies with the CJIS network including the National Crime Information Center (NCIC), Automated Fingerprint Information System (AFIS), Uniform Crime Reporting (UCR), and the National Incidents Bases Reporting System (NIBRS); Law Enforcement Information Exchange (LInX).
• Analyze and design security for information systems, IT projects, and network infrastructure.
• Advise JHPD leadership in policy-making decisions concerning CJIS requirements and IT security procedures for all the JHPD automated systems.
• Stay current with changes in CJIS regulations and best practices and make recommendations for improving the department's compliance posture.
• Provide technical assistance to interface LInX, NCIC, NLETS, UCR, NIBRS, and AFIS networks relating to any information available over such networks.
• Lead response and investigation during CJIS related security incidents or events.
• Provide training and educational programs for department personnel on CJIS requirements, security protocols, and best practices.
• Serve as the primary point of contact with external agencies regarding CJIS compliance matters, including law enforcement agencies, regulatory bodies, and auditors.
• Maintain accurate and up-to-date records of all compliance activities, audits, and training sessions, including ensuring technical compliance with CJIS security policies.
• Regularly participate in user groups and professional organizations focused on IT security and audits.
• Utilize monitoring, forecasting, trend analysis, and/or reporting tools to analyze business functions and make engineering recommendations to integrate technology.
• Conduct regular internal audits and inspections to ensure CJIS network compliance with local, state, and federal statutes, regulations, policies, and guidelines.
• Provide both written and oral reports to the Johns Hopkins Public Safety Senior Director of Information Technology and other JHPD leadership.
• Prepare and evaluate grant applications, statements of work, bid specifications and other documentation for funding and acquisition of tools, technology, contractual services, and education relating to computer security.
• Plan, organize, direct, and coordinate IT security management efforts across multiple hardware and software platforms and technologies.
• Provide technical direction and strategic and tactical plans for the implementation and operation of current security technology, enabling the agency to operate more efficiently.
• Other duties as assigned.

The responsibilities listed above are typical examples of the work performed by this position. Not all duties assigned to this position are included, nor is it expected that everyone in this position will be assigned every job responsibility.

Skills and Abilities

• Familiarity with state and federal regulatory agencies and standards.
• Supervisory, as well as technical or project leadership experience.
• In-depth knowledge of CJIS policies, procedures, and compliance requirements.
• Strong analytical and problem-solving skills.
• Ability to plan and implement projects and audits necessary to ensure effective and efficient operations of security measures.
• Ability to establish and maintain effective working relationships within and outside the organization in a professional manner.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.
• Proficiency with information systems and databases used in criminal justice.
• Understanding of theory, principles, and practices of systems specification standards and application programming; computer programming and/or computer system design, hardware and software capabilities, and operating procedures.

• Bachelor's Degree in Criminal Justice, Information Security, or a related field.

• Minimum ten (10) years of experience in law enforcement, compliance, or information security.

• Must maintain any required licensure(s), certification(s), or other credentials for the length of employment in this classification.

Additional education may substitute for required experience and additional related experience may substitute for required education, to the extent permitted by the JHU equivalency formula.

* JHU Equivalency Formula: 30 undergraduate degree credits (semester hours) or 18 graduate degree credits may substitute for one year of experience. Additional related experience may substitute for the required education on the same basis. For jobs where equivalency is permitted, up to two years of non-related college course work may be applied towards the total minimum education/experience required for the respective job.

** Applicants who do not meet the posted requirements but are completing their final academic semester/quarter will be considered eligible for employment and may be asked to provide additional information confirming their academic completion date.

Requirements

• Must obtain a Certified Information Systems Auditor (CISA) Certification within one (1) year of hire.
• Must be able to successfully pass a background investigation process.

• Certified Information Systems Security Professional (CISSP) or Certified Information Systems Auditor (CISA) similar certification.
• Experience in a university or higher education environment.
• Minimum four (4) years' experience in the IT security management field with extensive knowledge of electronic data processing audit procedures.
• Certified Protection Professional (CPP).

Classified Title: CJIS Compliance Officer
Job Posting Title (Working Title):CJIS Compliance Officer
Role/Level/Range: ATP/04/PG
Starting Salary Range: $99,800 - $175,000 Annually (Commensurate w/exp.)
Employee group: Full Time
Schedule: M-F 8 am - 4 pm
FLSA Status:Exempt
Location:Hybrid/Eastern High Campus
Department name: VP for Public Safety Office of
Personnel area: University Administration