Information Security Architect

Job#: 3042020

Job Description:

The Office of Application and Technology Services (OATS) seeks highly motivated candidates for the Information Security Architect position in the Commonwealth of Kentucky, reporting to the Chief Information Security Officer. As the Information Security Architect, you will serve as the principal security advisor for planning, designing, implementing, maintaining, and analyzing systems within the division. As the Subject Matter Expert (SME) for all security operations, you will guide internal CHFS developers and vendor partners on security strategy and requirements. Your role will be instrumental in analyzing the current state of the divisions security program, designing future states, and creating implementation roadmaps to enhance security posture. Additionally, you will play a crucial role in designing, implementing, and maintaining robust security solutions to protect our organizations sensitive information and assets. Collaboration with various teams to assess security risks, develop strategies, and implement controls to mitigate threats effectively will be essential. This role requires a deep understanding of security principles, technologies, and industry best practices. Other responsibilities include:

Required Experience

Security Program Development:

• Analyze the current state of the Divisions security program and design future states, creating a roadmap for implementation.

• Develop a business case and key performance indicators (KPIs) and socialize the security program within the Division.

• Security Policy Management:

• Assess, manage, and improve security policies and procedures to align with industry best practices and organizational objectives.

• Advise on security decisions and direction based on the Divisions vision and mission.

• Collaboration and Strategy Development:

• Collaborate with other Division Architects and the Security Operations Manager to develop global security strategies based on industry best practices.

• Advise on security decisions and direction based on a deep understanding of the Divisions vision and mission.

• Security Architecture Development:

• Develop and maintain a security architecture process aligned with business and technology drivers.

• Create security strategy plans and roadmaps based on enterprise architecture practices.

• Security Standards and Procedures:

• Draft security procedures and standards for executive management approval or authorization by the Cabinet CISO.

• Determine baseline security configuration standards for operating systems, network segmentation, and identity and access management.

• Risk Assessment and Response:

• Perform risk assessments, advise on risk response strategies, and identify security issues from system integration.

• Conduct or facilitate threat modeling of services and applications to mitigate associated risks.

• Collaboration and Coordination:

• Coordinate with DevOps teams to advocate secure coding practices and escalate concerns about poor coding practices.

• Liaise with privacy and compliance officers to document data flows of sensitive information and recommend appropriate controls.

• Security Operations Support:

• Support internal security controls testing and validation as directed by the CISO or internal audit team.

• Review security technologies, tools, and services and recommend their use based on security metrics.

• Security Infrastructure Implementation:

• Evaluate, select, and implement security technologies, tools, and solutions to enhance the organizations security posture.

• Configure and deploy security infrastructure components such as firewalls, intrusion detection/prevention systems, endpoint protection, encryption, and authentication mechanisms.

• Incident Response and Forensics:

• Develop incident response plans and procedures to mitigate security incidents effectively.

• Conduct post-incident analysis and forensic investigations to identify root causes and prevent future occurrences.

• Security Awareness and Training:

• Develop and deliver security awareness training programs to educate employees on security risks and best practices.

• Provide ongoing support and guidance to staff regarding security-related inquiries and concerns.

Preferred Education & Experience:

Bachelor's degree in computer science, Information Security, or related field; advanced degree preferred.

Proven experience (5+ years) in information security architecture, design, and implementation.

Candidates with one or more of the following certifications are a plus:

Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information System Auditor (CISA), or other relevant certifications preferred.

This is a partial listingof the necessary knowledge, skills,and abilities to perform the job successfully. It is not an exhaustive list.

Ability to set the tone for the organization and motivate management and team.

• Understanding information securityregulations, including the Federal Information Security Management Act (FISMA), FederalRisk and Authorization Management Program (FedRAMP), ISO 27001, COBIT NIST, and ITIL.
• Maintaining security, assessingand evaluating security, and doing securityincident forensic work. Knowledge of vendors and their products, including:
• Experience with Government agencies, particularly the Department of Defense (DoD),on information security matters. Experience with Government Classified systems and the associated security requirements.
• Updates job knowledgeby tracking and understanding emergingsecurity practices and standards, participating in educational opportunities, reading professional publications, maintaining personal networks, and participating in professional organizations.
• Proficiency in Microsoft Office Suite (Word, Excel, Outlook, etc.)
• Innovative and creative mindset
• Basic network securityknowledge (general principles)
• Excellent documentation and communication skills.
• Ability to organize tasks into milestones and successfully executeto project completion.
• Can work independently with little directsupervision.
• General cyber-security understanding

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click here for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at https://www.apexsystems.com/privacy-policy

Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Everforth Apex team member can provide.

Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.

If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at [email protected] or 804-523-8228. Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.

UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.

Employee Type:

Contract

Remote:

Yes

Location:

Frankfort, KY, US

Job Type:

Date Posted:

July 13, 2026

Pay Range:

$30 - $40 per hour

Similar Jobs

• Information Security Specialist
• Information Security Analyst
• Security Architect
• Security Architect
• Information Security Engineer 3