Business Analyst III (OPSR/LASO)

Business Analyst III (OPSR/LASO)

Salary

$82,968.83 - $107,859.49 Annually

Location

Austin, TX

Job Type

Full Time

Job Number

27-10960

Department

Sheriff

Opening Date

10/29/2026

Closing Date

11/12/2026 11:59 PM Central

• Description
• Benefits
• Questions

Job Summary

Help protect criminal justice information and build the security compliance program that supports the Travis County Sheriff's Office.

TCSO is hiring a full-time Business Analyst III to lead its local Criminal Justice Information Services (CJIS) security compliance program as designated Organizational Personnel with Security Responsibilities (OPSR), a function historically associated with the Local Agency Security Officer (LASO). This dedicated role offers the opportunity to strengthen how the agency assigns security responsibilities, verifies safeguards, and follows compliance issues through to resolution.

You will use your technical and analytical skills to evaluate systems and data flows, review security configurations and supporting evidence, prepare complete audit packets, and coordinate security incident reporting. You will also review the work of designated control owners and help turn security requirements into practical procedures.

Reporting to the Central Warrants Manager, you will work closely with TCSO's Terminal Agency Coordinator (TAC), TCSO Technology, Travis County ITS and IT Security, the Facilities Management Department (FMD), the Texas Department of Public Safety (DPS), and other partners.

This position is suited to someone who enjoys investigating complex issues, organizing detailed information, explaining technical requirements clearly, and working across organizations to get results.

Distinguishing Characteristics:

This is the fourth in a series of four business analyst-related job classifications within the Information Technology job family. This assignment provides complex technical consulting, business process analysis, and oversight of the agency's CJIS security compliance program.

The OPSR leads security control coordination and verification and works with the TAC on related system access and operational requirements. The employee must understand technical security concepts sufficiently to evaluate system documentation, configurations, access records, logs, and other evidence with TCSO Technology, ITS and IT Security.

The position requires strong organization, attention to detail, independent judgment, and the ability to review others' work objectively. The employee is accountable for documenting control ownership, monitoring compliance, preparing audit materials, and following deficiencies through to correction or management escalation.

Responsibilities involving supporting departments, vendors, and other partners are carried out within applicable agreements and assigned authority.

This position requires independent judgment and ownership of assigned work. The employee is expected to evaluate information, apply established requirements, make and document decisions within delegated authority, and carry issues through to resolution. Matters requiring management action must be presented with the relevant facts, applicable requirements, available options, and a recommended course of action.

Duties and Responsibilities

• Serve as TCSO's designated OPSR and principal local contact for CJIS information security matters within the responsibilities assigned by the agency.
• Build and maintain a documented assignment of CJIS security control responsibilities. Identify required activities, proposed control owners, supporting personnel, required evidence, and review schedules. Obtain appropriate management approval for assignments and keep them current.
• Audit the work and compliance evidence of designated security control owners and supporting personnel within the assigned scope. Coordinate reviews with Travis County ITS and IT Security, document deficiencies, and verify that corrective actions address the findings.
• Prepare and maintain complete, organized audit packets for CJIS technical security audits and related assessments. Assemble control documentation, supporting evidence, written responses, and corrective action records so materials are accurate, current, and readily retrievable.
• Maintain a security compliance tracking system identifying control owners, required evidence, review schedules, findings, deadlines, and corrective action status. Follow up on missing or incomplete items and escalate unresolved issues.
• Maintain a documented inventory of systems, devices, connections, services, and supporting organizations that process, store, transmit, or provide access to criminal justice information within the assigned environment
• Review network and data flow diagrams, access and authentication settings, audit logs, configuration records, and other technical evidence with ITS and IT Security. Assess whether the evidence demonstrates compliance and identify items requiring further review or remediation.
• Coordinate with ITS, IT Security, and responsible technical personnel to verify implementation and operation of applicable security measures, including access control, authentication, logging, configuration management, physical security, media protection, and incident response.
• Oversee compliance with applicable personnel screening and CJIS security training requirements for TCSO and supporting personnel within applicable agreements. Coordinate screening processes and required approvals with responsible officials, maintain or verify documentation, and address access-related issues with the TAC.
• Review proposed applications, integrations, data exchanges, vendor services, and system changes with the TAC, TCSO Technology, ITS, and IT Security. Document the information involved, authorized users, connections, downstream recipients, storage, retention, and unresolved security requirements for agency review.
• Review applicable agreements and documented responsibilities with ITS, IT Security, FMD, vendors, and other partners. Identify gaps between assigned responsibilities and actual practices and coordinate resolution through appropriate officials.
• Develop and maintain security policies and procedures for management approval. Coordinate implementation and confirm that documentation reflects actual practices.
• Coordinate CJIS security incident reporting and documentation with ITS, TCSO Technology, IT Security, the TAC, and other designated officials. Ensure required notifications, including notifications to the DPS CJIS security contact when applicable, are made through established channels within required timeframes.
• Support incident follow-up with responsible technical and operational personnel. Document findings, track corrective action, and verify that identified compliance gaps are addressed.
• Monitor changes to the FBI CJIS Security Policy and applicable Texas DPS requirements and guidance, evaluate their effect on TCSO systems and procedures, and coordinate implementation with designated control owners.
• Use spreadsheets, reporting tools, and compliance tracking systems to organize evidence, identify overdue requirements, analyze findings, and report program status.
• Provide the Central Warrants Manager with regular reports on control ownership, compliance status, audit readiness, open findings, corrective actions, and unresolved risks.
• Work with the TAC to coordinate overlapping access, training, audit, and incident matters, with documented responsibility for follow-up.
• Respond to urgent after-hours security matters and ensure required incident reporting is completed outside regular working hours when necessary.
• Independently interpret network and data flow diagrams, system connections, access paths, authentication methods, and supporting technical documentation. Identify missing information, inconsistencies, and potential gaps in applicable security requirements.
• Evaluate technical explanations and evidence provided by system owners, ITS, IT Security, and vendors. Determine whether the evidence supports compliance, request additional information when needed, and document the basis for findings.
• Make and document routine CJIS security compliance determinations within delegated authority. Identify deficiencies and required corrective actions, communicate them clearly to responsible personnel, and verify resolution.
• Present proposed exceptions, unresolved technical concerns, and decisions outside delegated authority to management with a documented assessment and recommended action.
• Perform other job-related duties as assigned.

Minimum Requirements

Education and Experience:

Bachelors degree in Computer Science, Information Systems, Business Administration or a directly related field AND five (5) years of relevant work experience;

OR,

Any combination of education and experience that has been achieved and is equivalent to the stated education and experience and required knowledge, skills, and abilities sufficient to successfully perform the duties and responsibilities of this job.

Licenses, Registrations, Certifications, or Special Requirements:

Valid Texas Drivers License.

Applicants are required to attach a resume with the online application.

Preferred:

• Experience serving as a LASO, TAC, OPSR, or in a comparable information security compliance role.
• Experience applying the FBI CJIS Security Policy and applicable Texas DPS requirements and preparing for CJIS technical audits conducted by Texas DPS or the FBI.
• Experience reviewing technical security evidence, including access permissions, authentication settings, system configurations, logs, and network or data flow documentation.
• Experience assigning security control responsibilities, preparing audit packets, reviewing others' work, and managing corrective action.
• Experience reviewing applications, integrations, data exchanges, and vendor arrangements.
• Experience coordinating security requirements and incident response with IT departments, information security personnel, and multiple organizations.

Knowledge, Skills, and Abilities:

Knowledge of:

• The FBI CJIS Security Policy, applicable Texas DPS requirements, and local information security responsibilities.
• Security control assignments, compliance evidence, risk assessment, audit preparation, and corrective action.
• User and privileged access, authentication, audit logging, system configuration, and network security concepts.
• Personnel screening, security training, physical security, media protection, and incident reporting.
• Information systems, network connections, data flows, and technical documentation.
• Security considerations for applications, integrations, vendor services, and information sharing.
• Business analysis, process documentation, and change management.

Skill in:

• Evaluating technical and operational evidence against written security requirements.
• Interpreting system configurations, access records, logs, and network or data flow diagrams in coordination with technical personnel.
• Using spreadsheets, reporting tools, and compliance tracking systems to organize evidence and identify exceptions.
• Documenting control responsibilities, findings, decisions, and corrective actions.
• Managing compliance activities and deadlines across multiple responsible teams.
• Explaining security requirements to technical staff and nontechnical decision-makers.
• Writing clear policies, procedures, assessment findings, and management reports.

Ability to:

• Learn and use technical systems and tools relevant to security assessment and compliance.
• Maintain a high level of organization and attention to detail while collecting documentation from multiple sources and producing complete, accurate audit packets.
• Make timely, well-supported decisions within established policies, agreements, and delegated authority. Resolve routine matters independently and escalate exceptions, material risks, conflicting requirements, or decisions outside assigned authority.
• Evaluate others' work objectively, explain deficiencies clearly, and follow through on corrective action.
• Establish effective working relationships with the TAC, ITS, IT Security, FMD, and external partners.
• Identify gaps in technical evidence and obtain the information needed to assess compliance.
• Handle sensitive criminal justice and security information appropriately.
• Coordinate effectively during incidents, maintain accurate documentation under time pressure, and promptly escalate unresolved risks.

Work Environment & Other Information

Physical requirements include the ability to lift/carry up to 35-40 pounds occasionally, visual acuity, speech and hearing, hand and eye coordination and manual dexterity necessary to operate a computer and office equipment. Subject to standing, sitting, walking, climbing, crawling, bending, stooping, crouching, kneeling, pushing, pulling, reaching, twisting, balancing, repetitive motion, and squatting to perform the essential functions. Subject to exposure to variations in extreme heat, cold, mechanical, fume/odor, and dust/mites.

Travis County employees play an important role in business continuity. As such, employees can be assigned to business continuity efforts outside of normal job functions.

Work Hours: 8 am - 5 pm, Monday-Friday. Requires telephone response to after-hour emergencies and possibly in-person response if deemed necessary.

Location: Austin TX

Department: Sheriff

Criminal, Driving, Education, and Employment Background Checks Required.

Drug Test Required.

For updates or questions on this position, contact: Monica.Risaliti@traviscountytx.gov

This job description is intended to be generic in nature. It is not necessarily an exhaustive list of all duties and responsibilities. The essential duties, functions and responsibilities and overtime eligibility may vary based on the specific tasks assigned to the position.

Benefits

Employment at Travis County comes with a full array of benefits. We offer comprehensive health insurance, a no-cost, on-site Health and Wellness clinic, longevity pay, paid vacations, sick time and personal holidays, not to mention an industry competitive salary structure and a friendly, stable work environment.

FY2027 Travis County Benefit Guide

In this valuable Travis County Benefits Guide you will find benefit summaries, eligibility requirements, costs, contact numbers and addresses as well as other general information on the benefits available to Travis County Employees and Retirees.

Credit Union

Employees may join the Travis County Credit Union which offers low-interest loans, savings plans through payroll deduction, safe deposit boxes and other benefits.

Deferred Compensation

Employees may enroll in a tax- free sheltered investment plan through payroll deduction.

Direct Deposit

Employees may sign up for direct bank deposit.

Employee Assistance Program

Travis County provides a confidential counseling and referral service free of charge to county employees and their family.

Employee Organizations

Membership in the American Federation of State, County, and Municipal Employees Union is available through payroll deduction.

Employee Health & Wellness Clinic

Employees may access the clinic for a variety of wellness program and health care services with no co-pay, no deductible and no co-insurance costs.

Holidays

An average of eleven paid holidays are designated by the Travis County Commissioners Court at the beginning of each fiscal year.

Insurance

Employees may select from four plans: an Exclusive Physician Organization (EPO), Choice Plus Preferred Physician Organization (PPO), Consumer Choice or a High Deductible Health Plan (HDHP) with a Health Savings Account (HSA). All four options include a Pharmacy Plan. Travis County's current policy is to pay 100% of the employee's health insurance premium for the Consumer Choice and HDHP. Employees will pay a premium for both the EPO and PPO. Other insurance benefits include $50,000 Basic Life and AD&D paid by the County.

The following benefits are employee paid:

• Dental
• Vision
• Supplemental Life, AD&D
• Dependent Life
• Short Term Disability
• Long Term Disability
• Long Term Care

New employees are covered on the first day of the month following 28 calendar days of employment.

Longevity

Longevity pay is paid for each year completed after three years of continuous service. Peace Officers in a law enforcement activity, whose job requires state peace officer certification, receive pay after one year of certification.

On the regular payday on or after the employees fourth and subsequent adjusted service dates, he or she receives a single payment for the previous year.

Parking

A limited number of assigned parking spaces are available to employees in the Courthouse Complex.

Personal Holidays

Regular, full-time employees are eligible for up to three paid personal holidays each calendar year. Part-time employees shall be granted personal holidays on a prorated basis. New employees earn personal holidays for the calendar year in which he/she begins employment, based on the month in which employment begins:

January - March

3 personal holidays

April - June

2 personal holidays

July - September

1 personal holiday

October - December

None

New employees are eligible to take personal holidays after 90 days of employment.

Retirement

Travis County is a member of the Texas County & District Retirement System with mandatory participation by certain classes of employees. Seven percent (7%) of the gross salary is deducted each pay period. An employee is fully vested after eight years of service. Benefits are prorated for part-time employees.

Sick Leave

Regular employees earn sick leave at a rate of eight hours per month with unlimited accrual during employment. Part-time employees earn sick leave on a pro-rated basis.

Parental Leave

Each Full-time Paid Parental Leave Eligible (PPL) Employee is entitled to a total of 320 hours of Paid Parental Leave in a 12 month period. Paid Parental Leave for Part-time PPL Eligible Employees is prorated based on the number of hours that they are regularly scheduled to work.

Tuition Refund

Certain classes of full-time employees may receive reimbursement for fees associated with pre-approved, job related course work completed satisfactorily.

Vacation

Based on years of county service, regular, full-time employees earn vacation time at the following rates:

0 to 5 years

4.0 hours per pay period

6 to 10 years

4.5 hours per pay period

11 to 15 years

5.0 hours per pay period

16 to 20 years

5.5 hours per pay period

21 plus years

6.0 hours per pay period

Part-time employees earn vacation leave on a pro-rated basis.

Workers Compensation

The county provides all employees workers compensation coverage with benefits in accordance with state statute, if the employee sustains an injury out of, or in the course of work.

01

Acknowledge - If you do not have direct experience, describe relevant transferable experience or state "None." Do not include confidential records, identifying information from actual cases, or sensitive system details.

• Yes
• No

02

Describe your experience serving as a LASO, OPSR, or in a comparable information security compliance role. Identify the policies or standards you applied.

03

Describe your experience establishing security control responsibilities across multiple teams or departments. How did you document ownership, coordinate with IT or information security personnel, monitor completion, and address unmet responsibilities?

04

Describe a technical security review you personally performed. Identify the configurations, access records, logs, network diagrams, data flows, or other evidence you examined. Explain how you determined whether a requirement was met and what you did when evidence was incomplete or a control was deficient.

05

Describe a security audit or compliance review in which you prepared an audit packet and reviewed work performed by others. Explain how you organized evidence, tracked missing items and deadlines, documented deficiencies, and verified corrective action. Identify your personal responsibilities and the outcome.

06

Describe your experience reviewing an application, integration, vendor service, or data exchange for security and access concerns. Explain what you examined, how you documented findings, and how you obtained decisions or corrective action.

07

Describe your role in responding to a suspected security incident or participating in an incident response exercise. Explain how you coordinated with technical staff and management, addressed reporting requirements, and tracked follow-up actions.

08

This position is based at the Gault Building in downtown Austin. Telework is not available. Work includes travel to other departments and agency locations for meetings, training, reviews, and audits. Are you willing to work under these conditions?

• Yes
• No

09

The regular schedule is Monday through Friday, generally 8 a.m. to 5 p.m., with adjustments subject to supervisory approval and operational needs. The position also requires telephone response to after-hours emergencies, required incident reporting, and in-person response when a catastrophic event requires it. Are you willing to work this schedule and meet these response expectations?

• Yes
• No

10

TCSO will arrange the TCIC/TLETS/CJIS training required for this assignment. To remain in this position, the employee must successfully complete the required training and pass the applicable certification examination within six months of hire. Attendance alone does not satisfy this requirement. Do you understand and agree to meet this requirement?

• Yes
• No

11

A detailed resume is required for the application to be considered. Have you submitted your resume with the online application?

• Yes
• No

Required Question

Employer Travis County

Address 700 Lavaca Street

Austin, Texas, 78701

Website https://www.traviscountytx.gov/human-resources/jobs