Technology Governance & Compliance Administrator

Harris County Sheriff's Office • Houston, TX

3d • Onsite

About The Position

Under general direction, supports the lawful, ethical, secure and accountable use of Sheriff’s Office technology through policy administration, risk-based compliance monitoring, employee education, data and vendor oversight, issue tracking and management reporting. Initial emphasis is on Automated License Plate Readers (ALPR) and other sensitive or high-risk systems as assigned. Works with system owners and operational commands to improve controls while maintaining continuity of public safety operations.

The position makes compliance findings and recommendations within an approved work plan. For reviews in that plan, it has standing access to user lists, access records and audit logs for governed systems; access to criminal justice information must meet CJIS and agency security requirements. Policy approval, system configuration and user-access decisions, personnel investigations and discipline, cybersecurity incident response, procurement decisions and operational command authority remain with their designated owners. The position does not direct IT projects, operate technology platforms or investigate employee misconduct.

The role operates primarily in a professional office environment and may require visits to controlled-access areas, including detention facilities, intake and restricted law enforcement systems areas, to observe system use. It is a full-time, exempt position, typically scheduled Monday through Friday, 8:00 AM to 5:00 PM, with occasional after-hours availability for command briefings or urgent reviews. The position reports to a designated supervisor in the Technology & Innovation Division, to be confirmed, and supervises no positions.

Requirements

• Bachelor’s degree in information systems, criminal justice, public administration, business, auditing, compliance or a closely related field. Four years of additional qualifying experience may substitute for the degree; a master’s degree or J.D. may substitute for one year of experience. Final substitutions must match the HRT class specification.
• Five years of professional experience in compliance, internal controls, audit, technology governance, risk management or policy implementation, including at least two years assessing information-system controls, user access or technology use.
• Pass the agency background investigation, including fingerprint-based CJIS screening.
• Knowledge of the FBI CJIS Security Policy, the Texas Public Information Act and Texas local government records retention requirements.
• Knowledge of compliance testing, control documentation, data stewardship and vendor oversight.
• Skill in reviewing access lists, system logs and audit evidence using spreadsheets or reporting tools.
• Skill in writing clear policies, procedures, training materials and executive reports.
• Ability to work with sworn and civilian personnel and vendors without direct supervisory authority.
• Ability to handle confidential and criminal justice information with discretion.
• Required CJIS Security Awareness Training certification, completed within the timeframe set by agency policy.

Nice To Haves

• Experience in a law enforcement or criminal justice agency.
• Experience with CJIS-related controls, public records and retention, or privacy compliance.
• Experience designing compliance testing plans, evaluating logs and audit evidence, leading cross-functional remediation and preparing executive-level reports.
• Preferred certification: Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Internal Auditor (CIA), Certified Compliance & Ethics Professional (CCEP), or Certified Information Privacy Professional (CIPP/US or CIPP/G).

Responsibilities

• Review and develop proposed technology-use policies, procedures, review schedules and documented controls, beginning with ALPR; coordinate reviews and approvals with affected commands, Legal, Information Security and other designated policy authorities; maintain approved versions and review histories; identify governance requirements for major system changes or deployments.
• Develop a risk-ranked review schedule and maintain a prioritized register of governed systems, operational owners and applicable requirements.
• Conduct evidence-based reviews, within the approved work plan, of technology use, access records, policy adherence, retention practices and documented exceptions; coordinate technical log extraction with system administrators.
• Document findings, control gaps and recommended corrective actions, and support CJIS and other authorized compliance audits.
• Coordinate responsible-use and policy training with the Academy, system owners and vendors; identify role-specific technical training needs and coordinate with technical instructors and system administrators; maintain training and acknowledgment records and report gaps to supervisors.
• Work with operational owners and designated data stewards to document appropriate use, access, retention, sharing and data-quality requirements.
• Coordinate with Legal, Procurement, contract staff and technical owners to review vendor obligations and compliance evidence; report material data-handling or contract concerns and track assigned remediation.
• Maintain a documented intake, referral and corrective-action tracking process for governance concerns and compliance findings; perform preliminary policy and control assessments; refer suspected misconduct, security incidents and legal concerns to the appropriate authorized unit; track owners, due dates and evidence of completion; identify recurring control weaknesses.
• Prepare concise periodic reports on reviews, policy gaps, training, vendor issues and corrective actions; provide findings and practical recommendations to Technology & Innovation management and designated command leadership; coordinate responses and evidence packages for authorized oversight reviews as directed.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level