Technical Compliance Auditor

Technical Compliance Auditor Agency

585 DEPARTMENT OF PUBLIC SAFETY

Dept. of Public Safety

Refer to the date listed at the top of this posting, if available. Continuous if date is blank.

Note:

Applications will be accepted until 11:59 PM on the day prior to the posting end date above.

Full time

Regular

$57,225.48/annually

This position is within the Oklahoma Law Enforcement Telecommunications System (OLETS) Division of the Department of Public Safety (DPS). The OLETS Division is tasked with being the direct point of contact between the state of Oklahoma criminal justice agencies and the Federal Bureau of Investigation's (FBI) Criminal Justice Information Services (CJIS) Division and the National Law Enforcement Telecommunications (Nlets) services.

The primary focus of this position is to ensure Oklahoma's CJIS Security Policy compliance, communication of policy requirements to all skill levels, and the education of Oklahoma's criminal justice agencies in cybersecurity best practices.

• Audit criminal justice agencies for CJIS Security Policy compliance
• Provide guidance and direction to agencies implementing security designs in hardware, software, data, and procedures
• Compile audit findings and establish plan of action and milestones (POAM)
• Develop and deliver presentations, provide training, or represent the agency at conferences, workshops, and other professional events
• Develop and maintain internal tools and processes to reinforce compliance with CJIS Security Policy
• Special projects and other audit-related responsibilities
• Work collaboratively with team members in support of OLETS' mission

• CJIS Security Policy
• Security tools
• Auditing best practices
• Emerging security threats and vulnerabilities
• Cybersecurity frameworks
• Data encryption standards
• Network segmentation

• Communicate technical security concepts and audit findings to all levels of staff
• Analyze artifacts including system audit logs, network diagrams, vulnerability scans, and security configurations to assess compliance without direct administrative system access.
• Prioritize daily tasks, meet deadlines, and work independently

Associate degree in information security, management information systems, or related from an accredited college or university or a comparable vocational or technical education course resulting in certification in information security; two (2) years of information security experience; an equivalent combination of education and experience. Preference may be given for individuals holding active industry-recognized security-related certifications.

The State of Oklahoma is an equal opportunity employer and does not discriminate on the basis of genetic information, race, religion, color, sex, age, national origin, or disability.