IT Security Architect

Hamilton County Clerk of Courts•Cincinnati, OH

10d•Onsite

About The Position

The IT Security Architect supports the security, resilience, and governance of CMSNet by establishing cybersecurity standards, managing enterprise security risk, strengthening incident preparedness, and coordinating cybersecurity practices across participating agencies. Reporting to the Chief Technology Officer, the role serves as CMSNet’s primary cybersecurity subject matter expert and provides strategic and technical guidance on protecting systems, networks, applications, information, and technology services. The Security Architect works with participating agencies and internal and external technology partners to develop and maintain cybersecurity policies, standards, architecture, controls, and response capabilities. The position leads CMSNet-wide cybersecurity governance and risk management, oversees vulnerability and security-control practices, coordinates incident response and preparedness, and advises agencies on security requirements and emerging threats. It also evaluates technology environments and proposed solutions, identifies risks and control gaps, supports identity and access governance, establishes secure configuration and architecture standards, and coordinates vendor and third-party security requirements. The role promotes consistent and improving cybersecurity practices across CMSNet while respecting the governance authority and operational needs of individual agencies. It monitors evolving threats, regulatory requirements, security frameworks, and industry practices, translating them into appropriate policies, controls, training, exercises, and improvements. The position is a strategic and technical resource to the Chief Technology Officer and participating agencies, helping ensure risks are managed, incidents are addressed, and technology environments remain secure and resilient.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related field.
Five years of progressively responsible professional cybersecurity experience in an enterprise, government, or similarly complex technology environment.
Knowledge of cybersecurity principles, practices, frameworks, and control methodologies for protecting enterprise systems, networks, applications, data, and services.
Knowledge of cybersecurity frameworks and requirements, including CIS Controls, the NIST Cybersecurity Framework, CJIS Security Policy, and other applicable governmental or regulatory requirements.
Knowledge of cybersecurity governance, risk management, and compliance practices, including risk identification, assessment, treatment, documentation, monitoring, and reporting.
Knowledge of security architecture, network and infrastructure security, identity and access management, vulnerability management, incident response, monitoring and logging, cloud and third-party security, secure configuration, data protection, and cybersecurity awareness practices.
Ability to provide strategic and technical cybersecurity guidance across multiple agencies and assess complex technology environments, risks, control gaps, and architectural concerns.
Ability to exercise independent judgment when evaluating cybersecurity risks, incidents, vulnerabilities, controls, and competing priorities.
Ability to develop practical cybersecurity policies, standards, procedures, and governance practices.
Ability to lead multi-agency incident response and prioritize remediation based on impact, likelihood, operational needs, resources, and applicable requirements.
Ability to interpret frameworks, regulatory requirements, and organizational obligations and translate them into practical controls and recommendations.
Ability to build professional relationships, facilitate collaboration, and communicate clearly with technical and nontechnical stakeholders.
Ability to manage multiple initiatives, assessments, remediation efforts, and priorities with appropriate documentation and follow-through.
Skill in cybersecurity architecture, risk assessment, security governance, and enterprise security standards and controls.
Skill in cybersecurity incident response, vulnerability management, identity and access management, and applying recognized frameworks and requirements.
Skill in evaluating the security of networks, systems, applications, cloud environments, hosted services, third-party integrations, and technology solutions.
Skill in developing secure configuration standards, policies, procedures, incident response plans, technical documentation, and security resources.
Skill in assessing vendor and third-party cybersecurity risk, compliance obligations, and technology-related contract considerations.
Skill in developing cybersecurity metrics, risk reporting, assessment methods, and documentation.
Skill in planning and facilitating cybersecurity awareness, training, tabletop exercises, and preparedness initiatives.
Any equivalent combination of education, certification, experience, and training that provides the required knowledge, skills, and abilities.

Nice To Haves

Experience in government, public-sector, criminal justice, court, law-enforcement, or another regulated technology environment.
A professional cybersecurity certification such as CISSP, CISM, CCSP, a GIAC certification, or a comparable industry-recognized certification.

Responsibilities

Develop, implement, maintain, and improve CMSNet-wide cybersecurity policies, standards, procedures, and governance practices.
Help participating agencies develop security procedures aligned with CMSNet requirements and applicable frameworks and regulations, including CIS Controls, the NIST Cybersecurity Framework, CJIS Security Policy, and relevant county and state requirements.
Establish cybersecurity maturity objectives, performance measures, assessment methods, and reporting structures; maintain a CMSNet-wide risk register and lead periodic structured risk assessments.
Help agencies interpret and apply CJIS, Local Rules, Supreme Court Rules of Superintendence, and other applicable judicial, county, or regulatory security requirements.
Participate in CMSNet Steering Committee activities and advise on cybersecurity policies, governance, risks, and multi-agency initiatives.
Monitor emerging risks, regulatory developments, and industry practices and recommend policy, procedure, and control updates.
Lead cybersecurity incident response throughout preparation, detection, analysis, containment, eradication, recovery, and post-incident review.
Maintain and update the CMSNet Incident Response Plan, including responsibilities, communications, escalation procedures, severity criteria, and notification requirements.
Maintain incident response documentation and resources, including service-level expectations, runbooks, contact information, notification trees, system references, and architecture documentation.
Coordinate multi-agency incident response with Network Support, Application Support, County Technical Services, LASOs, agency leadership, vendors, and other partners.
Establish procedures for preserving cybersecurity evidence, including log retention, system imaging, documentation, and chain-of-custody requirements.
Lead post-incident reviews and incorporate lessons learned into controls, detection capabilities, policies, procedures, and remediation efforts.
Coordinate required notifications and reporting to county oversight entities and other appropriate parties within applicable timelines.
Evaluate incident response capabilities and identify improvements to preparedness, communication, coordination, and response effectiveness.
Oversee enterprise vulnerability management, including authenticated and unauthenticated internal and external vulnerability scanning.
Review vulnerabilities, assess risk and remediation priorities, and coordinate corrective actions with Technical Services, agency IT teams, system owners, and vendors.
Track vulnerability remediation and communicate significant risks, unresolved vulnerabilities, and progress to leadership and stakeholders.
Oversee security governance for service accounts, multifactor authentication, password requirements, privileged access, and other identity and access management practices.
Support efforts to strengthen and centralize identity management platforms, directory services, authentication, and access governance across CMSNet.
Develop and maintain secure configuration standards for systems, networks, applications, and related technology environments.
Evaluate security practices and technical controls to reduce risk, strengthen resilience, and improve consistency across agencies.
Serve as a primary cybersecurity advisor and resource for participating agencies and agency leadership.
Build working relationships with agency IT teams, County Technical Services, LASOs, leadership, and other stakeholders to promote coordinated cybersecurity practices.
Help agencies adopt or adapt CMSNet cybersecurity policies, standards, and practices while respecting agency governance and operational authority.
Coordinate annual cybersecurity awareness and training programs across CMSNet agencies.
Develop and facilitate multi-agency cybersecurity tabletop exercises and conduct follow-up assessments to incorporate improvements into plans, policies, procedures, training, and operations.
Promote a security culture that encourages timely reporting of suspected incidents, vulnerabilities, and concerns.
Communicate cybersecurity risks, expectations, and technical concepts clearly to technical and nontechnical stakeholders.
Manage and monitor vendor and third-party cybersecurity requirements, including CJIS background requirements, security training, data protection obligations, and contractual requirements.
Coordinate periodic vendor security reviews, risk assessments, compliance verification, and documentation.
Evaluate security considerations for proposed acquisitions, hosted services, cloud environments, third-party integrations, and external technology solutions.
Monitor vendor, technology-provider, software-supply-chain, and third-party system risks and coordinate mitigation or remediation.
Partner with Purchasing, the Prosecutor’s Office, agency leadership, and others to develop and review contract provisions concerning cybersecurity, data protection, privacy, incident notification, and regulatory compliance.
Monitor vendor compliance and escalate material risks or deficiencies for review and action.