IT Security Architect

IT Security Architect

Department: Administration

Employment Type: Full Time

Location: 1000 Main Street, Cincinnati, Ohio 45202

Description

The IT Security Architect function supports the security, resilience, and effective governance of CMSNet by establishing cybersecurity standards, managing enterprise security risk, strengthening incident preparedness, and coordinating cybersecurity practices across participating agencies. Reporting to the Chief Technology Officer, the Security Architect serves as the primary cybersecurity subject matter expert for CMSNet and provides strategic and technical guidance regarding the protection of systems, networks, applications, information, and technology services.

This position works across participating agencies and with internal and external technology partners to develop and maintain cybersecurity policies, standards, architecture, controls, and response capabilities that reduce organizational risk while recognizing the governance authority and operational needs of individual agencies. The Security Architect leads CMSNet-wide cybersecurity governance and risk management activities, oversees vulnerability and security-control practices, coordinates cybersecurity
incident response and preparedness and advises agencies regarding applicable security requirements and emerging threats.

The Security Architect also plays a central role in strengthening cybersecurity consistency and maturity across CMSNet. This includes evaluating technology environments and proposed solutions, identifying security risks and control gaps, supporting identity and access governance, establishing secure configuration and architecture standards, coordinating vendor and third-party security requirements, and helping agencies implement practical security measures appropriate to their operations and risk.

The Security Architect is expected to demonstrate the following:

Cybersecurity Strategy, Governance and Risk Management - Establishes and maintains cybersecurity policies, standards, risk-management practices, performance measures, and governance structures that strengthen security across CMSNet and support informed decision-making by leadership and participating agencies.

• Security Architecture and Technical Risk Leadership - Evaluates systems, networks, applications, cloud services, identity platforms, and technology solutions to identify security risks, establish appropriate technical standards and controls, and promote secure and resilient technology environments.
• Incident Readiness and Response Leadership - Leads cybersecurity incident preparedness and response activities, including planning, coordination, escalation, evidence preservation, recovery, post-incident review, and continuous improvement.
• Cross-Agency Collaboration and Advisory Support - Builds productive working relationships with participating agencies, technology teams, leadership, LASOs, county partners, vendors, and other stakeholders and provides practical cybersecurity guidance that supports coordinated risk reduction while respecting agency governance and operational authority.
• Cybersecurity Awareness and Continuous Improvement - Monitors evolving threats, regulatory requirements, security frameworks, and industry practices and translates those developments into appropriate policies, controls, training, exercises, and improvements to CMSNet cybersecurity capabilities.

This role functions as a key strategic and technical resource to the Chief Technology Officer and participating CMSNet agencies, helping ensure cybersecurity risks are identified and managed, security expectations are clearly established, incidents are effectively addressed, and technology environments remain secure, resilient, and aligned with applicable operational, regulatory, and organizational requirements.

Cybersecurity Strategy, Governance and Risk Management - Establishes and maintains cybersecurity policies, standards, risk-management practices, performance measures, and governance structures that strengthen security across CMSNet and support informed decision-making by leadership and participating agencies.

• Security Architecture and Technical Risk Leadership - Evaluates systems, networks, applications, cloud services, identity platforms, and technology solutions to identify security risks, establish appropriate technical standards and controls, and promote secure and resilient technology environments.
• Incident Readiness and Response Leadership - Leads cybersecurity incident preparedness and response activities, including planning, coordination, escalation, evidence preservation, recovery, post-incident review, and continuous improvement.
• Cross-Agency Collaboration and Advisory Support - Builds productive working relationships with participating agencies, technology teams, leadership, LASOs, county partners, vendors, and other stakeholders and provides practical cybersecurity guidance that supports coordinated risk reduction while respecting agency governance and operational authority.
• Cybersecurity Awareness and Continuous Improvement - Monitors evolving threats, regulatory requirements, security frameworks, and industry practices and translates those developments into appropriate policies, controls, training, exercises, and improvements to CMSNet cybersecurity capabilities.

This role functions as a key strategic and technical resource to the Chief Technology Officer and participating CMSNet agencies, helping ensure cybersecurity risks are identified and managed, security expectations are clearly established, incidents are effectively addressed, and technology environments remain secure, resilient, and aligned with applicable operational, regulatory, and organizational requirements.

Essential Duties

25% CYBERSECURITY GOVERNANCE, RISK AND COMPLIANCEDevelop, implement, maintain, and continuously improve CMSNet-wide cybersecurity policies, standards, procedures, and governance practices.

Assist participating agencies in developing and implementing agency-specific security procedures that align with CMSNet requirements while recognizing individual agency governance authority and operational needs. Maintain alignment with applicable cybersecurity frameworks and requirements, including CIS Controls, the NIST Cybersecurity Framework, CJIS Security Policy, and relevant county and state requirements.

• Establish cybersecurity maturity objectives, performance measures, assessment methods, and reporting structures to evaluate and communicate the effectiveness of the cybersecurity program. Maintain a CMSNet-wide cybersecurity risk register and lead periodic, structured risk assessments across participating agencies.
• Assist agencies in interpreting and applying security obligations established through CJIS, Local Rules, Supreme Court Rules of Superintendence, and other applicable judicial, county, or regulatory requirements.
• Participate in CMSNet Steering Committee activities and provide cybersecurity expertise regarding policies, governance matters, risk considerations, and multi-agency security initiatives.
• Monitor emerging cybersecurity risks, regulatory developments, and industry practices and recommend appropriate changes to policies, procedures, and security controls.

25% CYBERSECURITY INCIDENT MANAGEMENT AND READINESS

• Lead cybersecurity incident response activities throughout the incident lifecycle, including preparation, detection, analysis, containment, eradication, recovery, and post-incident review.
• Maintain and regularly update the CMSNet Incident Response Plan, including defined responsibilities, communication protocols, escalation procedures, severity criteria, and notification requirements.
• Maintain incident response documentation and resources, including service-level expectations, response runbooks, contact information, notification trees, system references, and architecture documentation necessary to support an effective response.
• Coordinate multi-agency incident response activities with Network Support, Application Support, County Technical Services, LASOs, agency leadership, vendors, and other appropriate partners. Establish and maintain procedures for preserving cybersecurity evidence, including log retention, system imaging, documentation, and chain-of-custody requirements.
• Lead post-incident reviews involving appropriate agencies and stakeholders and incorporate lessons learned into security controls, detection capabilities, policies, procedures, and remediation efforts.
• Coordinate required notifications and reporting to county oversight entities and other appropriate parties in accordance with applicable regulatory or organizational timelines.
• Evaluate incident response capabilities and identify opportunities to improve organizational preparedness, communication, coordination, and response effectiveness.

20% VULNERABILITY MANAGEMENT, SECURITY OPERATIONS AND IDENTITY GOVERNANCE

• Oversee CMSNet enterprise vulnerability management processes, including authenticated and unauthenticated internal and external vulnerability scanning.
• Review identified vulnerabilities, assess risk and remediation priorities, and coordinate corrective actions with Technical Services, agency information technology teams, system owners, and contracted vendors.
• Track vulnerability remediation efforts and communicate significant risks, unresolved vulnerabilities, and remediation progress to appropriate leadership and stakeholders.
• Oversee security governance related to service accounts, multifactor authentication, password requirements, privileged access, and other identity and access management practices.
• Support efforts to strengthen and centralize identity management platforms, directory services, authentication practices, and access governance across CMSNet.
• Develop and maintain secure configuration standards for systems, networks, applications, and related technology environments.
• Evaluate security practices and technical controls to identify opportunities to reduce risk, strengthen resilience, and improve consistency across CMSNet agencies.

15% AGENCY COLLABORATION, TRAINING AND CYBERSECURITY AWARENESS

• Serve as a primary cybersecurity advisor and resource for participating CMSNet agencies and agency leadership.
• Build and maintain productive working relationships with agency information technology teams, County Technical Services, LASOs, leadership, and other stakeholders to promote coordinated cybersecurity practices.
• Assist agencies with adopting or adapting CMSNet cybersecurity policies, standards, and practices while respecting individual agency governance and operational authority.
• Coordinate annual cybersecurity awareness and training programs across CMSNet agencies.
• Develop and facilitate multi-agency cybersecurity tabletop exercises using realistic, high-impact scenarios to evaluate organizational preparedness and response capabilities.
• Conduct follow-up assessments after exercises and incorporate identified improvements into incident response plans, policies, procedures, training, and operational practices.
• Promote a security culture that encourages timely reporting of suspected incidents, vulnerabilities, and cybersecurity concerns without discouraging employees from raising potential issues.
• Communicate cybersecurity risks, expectations, and technical concepts in a manner that is understandable and actionable for technical and nontechnical stakeholders.

15% VENDOR SECURITY, CONTRACTS AND THIRD-PARTY RISK

• Manage and monitor cybersecurity requirements applicable to vendors and third-party service providers, including CJIS background requirements, required security training, data protection obligations, and other contractual security requirements.
• Coordinate periodic vendor security reviews, risk assessments, compliance verification, and documentation requirements.
• Evaluate cybersecurity considerations associated with proposed technology acquisitions, hosted services, cloud environments, third-party integrations, and other external technology solutions.
• Monitor cybersecurity risks associated with vendors, technology providers, software supply chains, and third-party systems and coordinate appropriate mitigation or remediation activities.
• Partner with Purchasing, the Prosecutor's Office, agency leadership, and other appropriate stakeholders to develop and review contract provisions addressing cybersecurity, data protection, privacy, incident notification, regulatory compliance, and related requirements.
• Monitor vendor compliance with established cybersecurity requirements and elevate material risks or deficiencies for appropriate review and action.

Preferred Skills

PREFERRED SKILLS:

Knowledge of:Cybersecurity principles, practices, frameworks, and control methodologies used to protect enterprise systems, networks, applications, data, and technology services.

• Recognized cybersecurity frameworks and standards, including CIS Controls, the NIST Cybersecurity Framework, CJIS Security Policy, and other applicable governmental or regulatory security requirements.
• Cybersecurity governance, risk management, and compliance practices, including risk identification, assessment, treatment, documentation, monitoring, and reporting.
• Security architecture principles, including defense-in-depth, segmentation, secure system design, least privilege, zero trust concepts, and methods for reducing technical and operational risk.
• Network and infrastructure security concepts, including firewalls, routing, remote access, endpoint protection, monitoring, logging, intrusion detection, and secure communications.
• Identity and access management principles, including authentication, authorization, multifactor authentication, privileged access management, service accounts, directory services, and access lifecycle management.
• Vulnerability management practices, including vulnerability identification, scanning methodol