Security Architect

FBT Gibbons LLP is a national law firm focused on serving companies operating and investing in the middle market. With nearly 1,500 employees across 26 offices, we support clients ranging from large multinationals to mid-sized businesses and growth-oriented startups across the United States. Our teams collaborate across departments and geographies to deliver excellent service to our clients, colleagues, and the communities we serve.

At FBT Gibbons, diversity enriches our vibrant culture and empowers our teams to achieve more together. We welcome talented professionals who bring valuable skills, a collaborative mindset, and a shared commitment to helping our firm and clients thrive. Here, you’ll make meaningful contributions, collaborate with exceptional colleagues, and build a career that grows with your skills and ambitions.

We are currently seeking a Security Architect to shape and advance the firm's enterprise security architecture, lead the implementation of modern security frameworks and risk management initiatives, and partner across the organization to protect systems, data, and infrastructure while fostering a strong culture of security and compliance.

The ideal candidate is a collaborative and forward-thinking cybersecurity professional with strong technical expertise, exceptional problem-solving skills, and a passion for protecting systems, data, and emerging technologies.

This position can be based in Cincinnati, OH;
Columbus, OH;
Indianapolis, IN;
Lexington, KY; or Louisville, KY.

• Design, implement and maintain secure authentication and authorization architecture across firm systems and applications.
• Align cloud, network and technology infrastructure with zero trust security principles and industry best practices.
• Provide security guidance and best practices for cloud infrastructure, existing technology platforms, and new IT solutions.
• Manage the preparation, execution, and remediation of security assessments, risk reviews, and compliance activities.
• Develop, track and report on security metrics, key performance indicators (KPIs) and overall program effectiveness.
• Support the Security and Compliance Specialist with client-required compliance reviews by preparing and validating approved security artifacts and documentation.
• Assist with vendor security assessments by evaluating compliance gaps, developing remediation plans, and supporting implementation of required security controls.
• Review and monitor firm systems to ensure compliance with established security baselines, policies and standards.
• Manage, optimize and evaluate existing security tools and technologies while recommending and implementing solutions to strengthen the firm’s security posture.
• Develop, maintain, and monitor standardized security processes to ensure consistent application of controls across the firm.
• Ensure security requirements are incorporated into end-user access management, equipment provisioning, and technology lifecycle processes.
• Execute security, privacy, and risk-related audit activities while ensuring appropriate documentation and follow-up.
• Conduct security reviews of proposed software, vendors, applications, and technology projects to identify risks and recommend mitigation strategies.
• Monitor and enhance data protection practices, including network storage security, encryption standards, removable media controls, and remote access safeguards.
• Troubleshoot and resolve network security, access, and system integrity issues.
• Monitor emerging cybersecurity threats and vulnerabilities using industry resources, including government and law enforcement advisories, and communicate relevant risks to stakeholders.
• Partner with cross-functional teams to identify security improvements, operational efficiencies, and opportunities to strengthen technology controls.
• Recommend and lead security enhancements based on industry best practices related to threat management, vulnerability prevention, compliance, and monitoring.
• Conduct security incident investigations, document findings, coordinate remediation activities, and implement preventative measures.
• Analyze security incidents to identify root causes and…