Enterprise Information Security Architect

State-of-Iow; Des Moines (IA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

IPERS

Health, dental, and vision insurance

Generous vacation and holidays

Life and disability insurance

Retirement savings options (RIC)

Flexible Spending Accounts

Job summary

Iowa Department of Management (DOM) in Des Moines seeks an Information Security Architect to design, implement, and govern the State of Iowa’s enterprise security architecture. The role embeds security into technology solutions, aligning with national standards and the Iowa Cyber Strategy.

The incumbent will lead scalable security controls, document compensating controls, and drive RMF/NIST alignment across agencies, with a focus on threat modeling and secure design principles.

Qualifications

• Proven expertise in security architecture and enterprise-level design.
• Experience with NIST and RMF frameworks for secure system implementation.
• Knowledge of threat modeling using MITRE ATT&CK and cyber kill chain methodologies.
• Strong collaboration skills to work across agencies and technical teams.
• Ability to translate policy into actionable controls for compliance and audit readiness.
• Forward-thinking approach to address emerging threats and technologies.
• Preferred certifications: CISSP, CISA, GSEC, or equivalent.

Responsibilities

• Develop, implement, and continuously improve the State’s enterprise security architecture framework.
• Define and enforce standards that integrate security controls across systems, platforms, and services.
• Establish scalable technical, administrative, and physical controls to maintain a consistent security posture statewide.
• Serve as the authority for identifying and documenting compensating controls when baseline measures are not feasible.
• Ensure alignment with NIST SP 800-53, RMF, and the Iowa Cyber Strategy.
• Translate compliance and policy requirements into measurable, enforceable security controls.
• Conduct threat modeling using MITRE ATT&CK and the cyber kill chain to inform architecture decisions.
• Enhance visibility and reporting of controls to support audits, assessments, and incident response.
• Collaborate with leadership, agency partners, and technical teams to embed secure design principles.
• Lead enterprise-wide initiatives, including project charters, cost-benefit analyses, and vendor oversight.
• Analyze statewide security trends and report on performance, risk posture, and architecture effectiveness.
• Represent the Chief Information Security Officer (CISO) in interagency committees and strategic planning efforts.
• Promote adoption of CyberGUARD standards and secure architecture practices across agencies.
• Evaluate emerging technologies and evolving threats to strengthen enterprise security architecture.

Skills

Security architecture

NIST RMF

MITRE ATT&CK

Threat modeling

Cross-team collaboration

Job description

Iowa Department of Management (DOM) in Des Moines seeks an Information Security Architect to design, implement, and govern the State of Iowa’s enterprise security architecture. The role embeds security into technology solutions, aligning with national standards and the Iowa Cyber Strategy.

The incumbent will lead scalable security controls, document compensating controls, and drive RMF/NIST alignment across agencies, with a focus on threat modeling and secure design principles.