Business Analyst Software Administrator

FT / PT Status – Full-Time
Benefits Eligibility – This position is eligible for a full benefits package.
Salary – $33.96 - $54.07 Hourly Wage
Remote Work / In-Office – In-Office / On-Site
Final date to receive applications – 10/21/2026*

The Utah Department of Corrections (UDC) is seeking a strategic, highly conscientious leader to serve as a Business Analyst Software Administrator and Information Security Officer (ISO) . In this pivotal role, you will lead the business-side data stewardship of the agency’s enterprise applications, while serving as the primary operational lead for cybersecurity, CJIS policy enforcement, incident response, and risk management regarding Criminal Justice Information (CJI).

As the core Subject Matter Expert (SME) and strategic liaison between UDC leadership, internal divisions, and the Division of Technology Services (DTS), you will ensure robust data security, data governance, and strict compliance with state and federal security mandates.

• Policy Oversight & Regulatory Compliance:
  Act as the internal expert and operational lead on the FBI CJIS Security Policy and NIST controls; ensure all agency software applications, networks, and physical spaces strictly align with state and federal security mandates.
• Audit Management & Corrective Actions:
  Lead pre-audit preparation, coordinate evidence collection, and represent the agency during triennial CJIS/FBI compliance audits and state technical reviews; author and execute Corrective Action Plans (CAPs) and Plans of Action and Milestones (POA&Ms) to remediate identified security deficiencies.
• Incident Response & Security Escalation:
  Oversee the detection, documentation, containment, and eradication of security incidents or unauthorized disclosures involving CJI; promptly escalation breaches to the CJIS Systems Officer (CSO), the FBI, and DTS security teams.
• Assessment & Authorization (A&A):
  Manage and maintain security packages within RSA Archer; complete DTS Form 524/525 Security Risk Assessments and ensure hosted cloud solutions (AWS/GCP) adhere to FIPS 140-2/140-3 encryption standards, SOC 2 attestations, and FedRAMP/GovRAMP frameworks.
• Vendor & Contractor Security Oversight:
  Partner with Local Agency Security Officers (LASOs) to verify that third-party contractors, software vendors, and external partners meet CJIS Security Addendum terms, background screening requirements, and data sharing restrictions before accessing agency systems.

• System Administration & Workflow Configuration:
  Manage business-side setups, client-side security roles, permission matrices, and workflow parameters for core agency platforms, including offender management systems (SIMON, O-Track) and document repositories (UDOCA/Knowvation).
• Committee Leadership & DTS Liaison:
  Chair the SIMON Steering Committee and co-chair the UDOCA Steering Committee; serve as the primary operational liaison to DTS developers and hosting teams to prioritize system updates, resolve application bugs, and review weekly error reports.
• Access Control & Lifecycle Auditing:
  Direct user provisioning, de-provisioning, and scheduled access audits across all business software, Active Directory, VPN groups, and hardware authentication tokens (Yubi Keys); enforce the principle of least privilege and ensure prompt termination processing for departing personnel.
• Data Quality & Analytics Validation:
  Utilize SQL tools (e.g., Db Visualizer, PuTTY) to query database structures, validate system data, resolve transaction errors, and oversee enterprise workflow data assets.

• CJIS & Information Security Mastery:
  Deep technical and policy expertise regarding the FBI…