Technology Governance & Compliance Administrator

General Summary Under general direction, supports the lawful, ethical, secure and accountable use of Sheriff’s Office technology through policy administration, risk-based compliance monitoring, employee education, data and vendor oversight, issue tracking and management reporting. Initial emphasis is on Automated License Plate Readers (ALPR) and other sensitive or high-risk systems as assigned. Works with system owners and operational commands to improve controls while maintaining continuity of public safety operations.

Key Responsibilities 1. Policy Development and Maintenance (20%) Reviews and develops proposed technology-use policies, procedures, review schedules and documented controls, beginning with ALPR. Coordinates review and approval through affected commands, Legal, Information Security and other designated policy authorities. Maintains current approved versions and review and approval history; identifies governance requirements for major system changes or deployments. 2.

Compliance Monitoring and Assurance (25%) Develops a risk-ranked review schedule and maintains a prioritized register of governed systems, their operational owners and applicable requirements. Conducts evidence-based reviews, within the approved work plan, of technology use, access records, policy adherence, retention practices and documented exceptions; coordinates technical log extraction with system administrators.

Documents findings, control gaps and recommended corrective actions; supports CJIS and other authorized compliance audits. 3. Employee Education and Responsible Use (15%) Coordinates responsible-use and policy training with the Academy, system owners and vendors. Identifies role-specific technical training needs and coordinates with, but does not replace, technical instructors and system administrators. Maintains training and acknowledgment records and reports gaps to supervisors for action under established policy. 4.

Data Stewardship and Vendor Accountability (15%) Works with operational owners and designated data stewards to document appropriate use, access, retention, sharing and data-quality requirements. Coordinates with Legal, Procurement, contract staff and technical owners to review vendor obligations and evidence of compliance. Reports material data-handling or contract concerns and tracks assigned remediation. 5. Governance Concerns and Corrective Action (15%) Maintains a documented intake, referral and corrective-action tracking process for governance concerns and compliance findings.

Performs preliminary policy and control assessments; promptly refers suspected misconduct, security incidents and legal concerns to the appropriate authorized unit. Tracks assigned owners, due dates and evidence of completion; identifies recurring control weaknesses. 6. Executive Reporting (10%) Prepares concise periodic reports on reviews, policy gaps, training, vendor issues and corrective actions. Provides findings and practical recommendations to Technology & Innovation management and designated command leadership.

Coordinates responses and evidence packages for authorized oversight reviews as directed. Scope of Authority and Coordination This position makes compliance findings and recommendations within an approved work plan. For reviews in that plan, it has standing access to user lists, access records and audit logs for governed systems; any access to criminal justice information must meet CJIS and agency security requirements.

Policy approval, system configuration and user-access decisions, personnel investigations and discipline, cybersecurity incident response, procurement decisions and operational command authority remain with their designated owners. The position does not direct IT projects, operate technology platforms or investigate employee misconduct. Examples of Duties Required Qualifications Bachelor’s degree in information systems, criminal justice, public administration, business, auditing, compliance or a closely related field.

Five (5) years of professional experience in compliance, internal controls, audit, technology governance, risk management or policy implementation, including at least two (2) years assessing information-system controls, user access or technology use. Substitutions: four (4) years of additional qualifying experience may substitute for the degree; a master’s degree or J.D. may substitute for one (1) year of experience. Final substitutions must match the HRT class specification.

Must pass the agency background investigation, including fingerprint-based CJIS screening. Knowledge, Skills, and Abilities Knowledge of the FBI CJIS Security Policy, the Texas Public Information Act and Texas local government records retention requirements. Knowledge of compliance testing, control documentation, data stewardship and vendor oversight. Skill in reviewing access lists, system logs and audit evidence using spreadsheets or reporting tools.

Skill in writing clear policies, procedures, training materials and executive reports. Ability to work with sworn and civilian personnel and vendors without direct supervisory authority. Ability to handle confidential and criminal justice information with discretion. Licenses and Certifications Required: CJIS Security Awareness Training certification, completed within the timeframe set by agency policy. Preferred: Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Internal Auditor (CIA), Certified Compliance & Ethics Professional (CCEP), or Certified Information Privacy Professional (CIPP/US or CIPP/G).

Qualifications Experience in a law enforcement or criminal justice agency. Experience with CJIS-related controls, public records and retention, or privacy compliance. Experience designing compliance testing plans, evaluating logs and audit evidence, leading cross-functional remediation and preparing executive-level reports. Supplemental Information Work Environment This job operates in a professional office environment.

This role routinely uses standard office equipment, such as computers, phones, photocopiers, filing cabinets, and fax machines. Work Environment & Physical Demands This position operates primarily in a professional office setting. May require visits to controlled-access areas, including detention facilities, intake and restricted law enforcement systems areas, to observe system use. Standard use of computers, phones, printers, servers, and technical equipment.

Position Type and Typical Hours of Work Position Type: Full-time, exempt Work Schedule: Typically Monday – Friday, 8:00 AM – 5:00 PM, with occasional after-hours availability for command briefings or urgent reviews. Other Duties: This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this position. Management may, at its discretion, assign or reassign duties and responsibilities to this job at any time.

Performance objectives and first-year milestones for this position are defined in a separately approved work plan, not in this job description. Reporting Relationships: Reports To Position: Designated supervisor, Technology & Innovation Division (to be confirmed) Supervises Positions: None Equal Opportunity Statement Harris County is an Equal Opportunity Employer and is committed to providing equal employment opportunities to all employees and applicants without regard to race, color, religion, sex, national origin, age, pregnancy, disability, genetic information, or any other protected class in accordance with applicable federal and state laws.