IT Security Architect

United States·CincinnatiFull Timemid

Security ArchitectCybersecurity

1 views0 saves0 applied

Apply Now

Quick Summary

Overview

The IT Security Architect function supports the security, resilience, and effective governance of CMSNet by establishing cybersecurity standards, managing enterprise security risk,

Technical Tools

Security ArchitectCybersecurity

The IT Security Architect function supports the security, resilience, and effective governance of CMSNet by establishing cybersecurity standards, managing enterprise security risk, strengthening incident preparedness, and coordinating cybersecurity practices across participating agencies. Reporting to the Chief Technology Officer, the Security Architect serves as the primary cybersecurity subject matter expert for CMSNet and provides strategic and technical guidance regarding the protection of systems, networks, applications, information, and technology services.

This position works across participating agencies and with internal and external technology partners to develop and maintain cybersecurity policies, standards, architecture, controls, and response capabilities that reduce organizational risk while recognizing the governance authority and operational needs of individual agencies. The Security Architect leads CMSNet-wide cybersecurity governance and risk management activities, oversees vulnerability and security-control practices, coordinates cybersecurity
incident response and preparedness and advises agencies regarding applicable security requirements and emerging threats.

The Security Architect also plays a central role in strengthening cybersecurity consistency and maturity across CMSNet. This includes evaluating technology environments and proposed solutions, identifying security risks and control gaps, supporting identity and access governance, establishing secure configuration and architecture standards, coordinating vendor and third-party security requirements, and helping agencies implement practical security measures appropriate to their operations and risk.

The Security Architect is expected to demonstrate the following:

Cybersecurity Strategy, Governance and Risk Management – Establishes and maintains cybersecurity policies, standards, risk-management practices, performance measures, and governance structures that strengthen security across CMSNet and support informed decision-making by leadership and participating agencies.

Security Architecture and Technical Risk Leadership – Evaluates systems, networks, applications, cloud services, identity platforms, and technology solutions to identify security risks, establish appropriate technical standards and controls, and promote secure and resilient technology environments.
Incident Readiness and Response Leadership – Leads cybersecurity incident preparedness and response activities, including planning, coordination, escalation, evidence preservation, recovery, post-incident review, and continuous improvement.
Cross-Agency Collaboration and Advisory Support – Builds productive working relationships with participating agencies, technology teams, leadership, LASOs, county partners, vendors, and other stakeholders and provides practical cybersecurity guidance that supports coordinated risk reduction while respecting agency governance and operational authority.
Cybersecurity Awareness and Continuous Improvement – Monitors evolving threats, regulatory requirements, security frameworks, and industry practices and translates those developments into appropriate policies, controls, training, exercises, and improvements to CMSNet cybersecurity capabilities.

This role functions as a key strategic and technical resource to the Chief Technology Officer and participating CMSNet agencies, helping ensure cybersecurity risks are identified and managed, security expectations are clearly established, incidents are effectively addressed, and technology environments remain secure, resilient, and aligned with applicable operational, regulatory, and organizational requirements.

The Security Architect is expected to demonstrate the following:

Cybersecurity Strategy, Governance and Risk Management – Establishes and maintains cybersecurity policies, standards, risk-management practices, performance measures, and governance structures that strengthen security across CMSNet and support informed decision-making by leadership and participating agencies.

Security Architecture and Technical Risk Leadership – Evaluates systems, networks, applications, cloud services, identity platforms, and technology solutions to identify security risks, establish appropriate technical standards and controls, and promote secure and resilient technology environments.
Incident Readiness and Response Leadership – Leads cybersecurity incident preparedness and response activities, including planning, coordination, escalation, evidence preservation, recovery, post-incident review, and continuous improvement.
Cross-Agency Collaboration and Advisory Support – Builds productive working relationships with participating agencies, technology teams, leadership, LASOs, county partners, vendors, and other stakeholders and provides practical cybersecurity guidance that supports coordinated risk reduction while respecting agency governance and operational authority.
Cybersecurity Awareness and Continuous Improvement – Monitors evolving threats, regulatory requirements, security frameworks, and industry practices and translates those developments into appropriate policies, controls, training, exercises, and improvements to CMSNet cybersecurity capabilities.