CJIS Compliance Officer

Johns Hopkins Public Safety is seeking a CJIS Compliance Officer who will be responsible for ensuring the Johns Hopkins Police Department (JHPD) adheres to all local, state, and federal regulations regarding the use, access, and management of criminal justice information systems. This role involves implementing compliance programs, conducting regular audits, providing training, and staying current with evolving CJIS policies and procedures.

The CJIS Compliance Officer is responsible for the implementation, direction, and execution of a highly sophisticated security program for the agency and its partners, which includes Johns Hopkins Public Safety (JHPS) IT, JHPS sworn officers, and other state, local, and federal agencies, as well as vendors and contractors. While the CJIS Compliance Officer reports to the Johns Hopkins Public Safety Senior Director of Information Technology, they are expected to use independent judgement and initiative to achieve their detailed duties.

Specific Duties and Responsibilities

• Develop, implement, and manage the CJIS compliance program for the JHPD.
• Create and update policies and procedures related to the management and security of CJIS data.
• Ensure the JHPD complies with the CJIS network including the National Crime Information Center (NCIC), Automated Fingerprint Information System (AFIS), Uniform Crime Reporting (UCR), and the National Incidents Bases Reporting System (NIBRS); Law Enforcement Information Exchange (LInX).
• Analyze and design security for information systems, IT projects, and network infrastructure.
• Advise JHPD leadership in policy-making decisions concerning CJIS requirements and IT security procedures for all the JHPD automated systems.
• Stay current with changes in CJIS regulations and best practices and make recommendations for improving the department's compliance posture.
• Provide technical assistance to interface LInX, NCIC, NLETS, UCR, NIBRS, and AFIS networks relating to any information available over such networks.
• Lead response and investigation during CJIS related security incidents or events.
• Provide training and educational programs for department personnel on CJIS requirements, security protocols, and best practices.
• Serve as the primary point of contact with external agencies regarding CJIS compliance matters, including law enforcement agencies, regulatory bodies, and auditors.
• Maintain accurate and up-to-date records of all compliance activities, audits, and training sessions, including ensuring technical compliance with CJIS security policies.
• Regularly participate in user groups and professional organizations focused on IT security and audits.
• Utilize monitoring, forecasting, trend analysis, and/or reporting tools to analyze business functions and make engineering recommendations to integrate technology.
• Conduct regular internal audits and inspections to ensure CJIS network compliance with local, state, and federal statutes, regulations, policies, and guidelines.
• Provide both written and oral reports to the Johns Hopkins Public Safety Senior Director of Information Technology and other JHPD leadership.
• Prepare and evaluate grant applications, statements of work, bid specifications and other documentation for funding and acquisition of tools, technology, contractual services, and education relating to computer security.
• Plan, organize, direct, and coordinate IT security management efforts across multiple hardware and software platforms and technologies.
• Provide technical direction and strategic and tactical plans for the implementation and operation of current security technology, enabling the agency to operate more efficiently.
• Other duties as assigned.

The responsibilities listed above are typical examples of the work performed by this position. Not all duties assigned to this position are included, nor is it expected that everyone in this position will be assigned every job responsibility.

Skills and Abilities

• Familiarity with state and federal regulatory agencies and standards.
• Supervisory, as well as technical or project leadership experience.
• In-depth knowledge of CJIS policies, procedures, and compliance requirements.
• Strong analytical and problem-solving skills.
• Ability to plan and implement projects and audits necessary to ensure effective and efficient operations of security measures.
• Ability to establish and maintain effective working relationships within and outside the organization in a professional manner.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.
• Proficiency with information systems and databases used in