AQR Manager
Description
Description
The Office of Secretary of State (OSOS) offers some of the most unique and diverse job opportunities in state government. Its critical responsibilities include: ensuring a fair and accurate elections process; connecting Washingtonians through the power of libraries; protecting our important government records; and registering corporations and charities. The Secretary of State also administers vital community programs that inspire giving, document our history, and assist crime survivors in avoiding further abuse. This independent office under the state Constitution operates from facilities in the Olympia area and statewide.
The OSOS is looking for top-performing employees who embody its core values of integrity, service excellence, visionary leadership, collaboration and teamwork. It is committed to both employee growth and work-life balance. The benefits of working in state government also include potential eligibility for the federal Public Service Loan Forgiveness program. Visit our website at: .
The Division of Information Technology (IT) ensures that all technology systems within OSOS business programs run smoothly, securely, and efficiently. We are the strategic partner in driving business goals, improving operational efficiency, and safeguarding critical data and systems. IT is deeply involved in ensuring the seamless flow of information, providing scalability and innovation, handling everything from hardware, software and tools to complex systems delivering valuable customer experience.
The Architecture, Quality & Risk (AQR) program within IT is focused on the integration of structural design with quality, performance, and security to mitigate development risks, and measurable evaluation for improved decision making, scalability, and enhanced reliability of the information technology used at OSOS. Quality Assurance standards and structure inform test driven best practices to thwart security vulnerability outcomes across all IT Programs & Services. This team is necessary to carry out the infrastructure and application design, development, and test standards for other IT program areas, and have an interconnected partnership with the Information Security and Response Division to ensure quality and risk outcomes resulting from their assessments/audits are completed by appropriate IT programs and teams successfully. The incumbent in the AQR Manager role will oversee the program and its services and lead IT in Architecture, Quality and Risk Management outcomes that support OSOS IT Governance, IT Policy and improved standardization and best practices.Architecture, Quality, and Risk (AQR) ManagerIT Architecture ManagerPermanent, Full-Time
The incumbent in the Architecture Quality and Risk Management role is responsible for ensuring policy, compliance over our design, regulatory, and quality requirements are met, while managing effective mechanisms to mitigate security risks identified by the Information Security and Response team are in place to safeguard the technology services applied across OSOS. This role bridges architectural expertise with quality assurance and risk management processes, to ensure IT delivers designs that meet business needs, following firm standards and best practice alignment, and applicable methods to prevent security risks through proactive measures. The role will ensure that the architecture policy, standards and projects delivering architectural outcomes and solutions meet the highest standard, risks are identified and proactively managed, and project managers and their sponsor teams achieve their goals and objectives while safeguarding quality and compliance actions. This role blends technical leadership with governance and quality oversight, requiring an incumbent who can translate complex IT risks into actionable architectural solutions while ensuring quality controlled operational excellence.Duties
Program Management and Governance
Tasks include:- Ensures program and frameworks are in place to meet the level of governance necessary to ensure clearer architected solutions are in place following quality assured practices, and security risk is mitigated through embedding safeguards into daily operations via policy, standards, and processes.
- Leads the coordination of the IT Architecture program, ensuring it aligns with enterprise IT goals, business priorities, and regulatory laws, rules, and state policy levels.
- Designs, develops, and maintains enterprise strategic planning for IT architecture, quality assurance and risk management, including lifecycle costing and service level agreement inventory.
- Oversee the delivery of services within the program by integrating the services into project and operational processes; resulting in data driven decision making and test-driven development are built in.
- Manages the budget, staffing and contracting for IT Architecture, QA, and Risk programs; ensuring resource optimization is in place for capability, capacity and performance where culture is aligned with organizational goals, values, and sustainability.
- Establishes reporting mechanisms for transparently sharing governed performance of OSOS IT Architecture, QA, and managed IT Risk factors within OSOS.
Tasks include:- Ensures that OSOS maintains an enterprise architecture strategy and plan, a technology roadmap that follows structured frameworks and focuses on sustaining an enterprise view of technology used and maintained.
- Designs, develops, and implements IT governance frameworks that align with the IT Strategic Plan, business objectives, and all compliance requirements (OSOS, WaTech, State, and Federal)
- Establishes the structure for Operating Level Agreements and service level agreements for IT Services.
- Designs, implements, and oversees IT systems, networks, and applications to meet business needs and quality standards.
- Ensures architectural solutions align with security, compliance, and operational requirements.
- Integrates hardware, software, and network systems into scalable, cost-effective, and secure solutions.
- Develops and maintains disaster recovery and business continuity plans.
- Ensures security requirements are integrated into all aspects of enterprise architecture, including reference models, segment and solution architecture, and the systems that support the agency’s mission.
- Develops cybersecurity designs for systems and networks, often with multilevel security or multiple classification level requirements (e.g., confidential, ).
- Documents and addresses information security, cybersecurity, and systems security engineering requirements throughout the acquisition lifecycle.
- Performs security reviews, identifies gaps, and develops security risk management plans.
- Ensure systems and architecture comply with the agency’s cybersecurity architecture guidelines.
- Coordinates with system owners, common control providers, and system security officers to allocate security controls, ensuring we follow the state’s Application, Mobile Device, and Network Security Standards.
- Work with IT programs and ISR Division to ensure security designs are developed and prepared for applicable state Security Design Review requirements.
Tasks include:- Ensures that all IT operations follow standards and best practices for delivering quality assured products and services.
- Develops and maintains the QA structures and processes for the OSOS IT Division and partner Division programs where applicable.
- Defines and enforces quality standards for IT deliverables, including testing, validation, and performance metrics.
- Implements quality assurance processes such as peer code review, deployment gate validations, test driven development practices, performance monitoring, and quality gate verification practices.
- Leads quality reviews of IT projects, processes, and documentation.
- Implement continuous improvement processes to enhance system reliability and user experience.
- Ensures OSOS meets the state’s Software Quality Best Practices guidelines and Project Quality Assurance Policy.
Risk Management and Oversight
Tasks include:- Ensures that all identified security findings found through internal or external audits have documented results for remediation across all applicable programs and services within IT, and provides reports and results to appropriate parties, such as ISR Division, Leadership, and external stakeholders.
- Ensures an IT Security Program is in place and functioning in support of Systems Disaster Recovery and business continuity.
- Identifies, assesses, and mitigates IT risks, including cybersecurity, data privacy, compliance, and operational risks.
- Develops and maintains risk management policies, procedures, and control frameworks.
- Conducts regular risk assessments, audits, and control effectiveness reviews with IT Programs services for system readiness.
- Provides advice to leadership on application and technology risk posture and mitigation strategies to further safeguard systems and reduce vulnerabilities and cyber threats.
- Ensures compliance with applicable laws, regulations, and internal policies.
- Works with IT, business, legal, RCQC team in ISR, and ISR security teams to address risks and improve IT programs & services systems and processes.
- Communicates risk findings and quality issues clearly to partners and leadership ensuring plans for remediation are documented and completed to root cause resolution.
- Leads training and awareness initiatives on IT risk and quality practices.
- Ensures that OSOS follows the state’s Information Security Risk Management and IT Security Incident Response policies.
- Working with Division Leadership, implements the Disaster Recovery plans and frameworks for all technology solutions to follow, including business continuity alignment.
Qualifications
Required Qualifications:
- 10 years of experience in Information Technology with roles leading up to the following knowledge skills and abilities:
- Translating business needs into structured, scalable designs, ensuring compliance with standards, and leading cross-functional teams.
- Ensuring designs meet technical, safety, and regulatory standards, and that quality processes are embedded in the design and delivery lifecycle.
- Deep understanding of architecture frameworks, quality standards (e.g., ISO 9001, ISO 13379), and risk management frameworks (e.g., ISO 31000).
- Ability to integrate design, quality assurance, and risk mitigation into project planning; lead multidisciplinary teams; and communicate complex technical and compliance issues to non-technical stakeholders.
- Strategic thinking, decision-making under uncertainty, change-leadership, and continuous improvement.
- A Bachelor’s degree in Computer Science, Information Technology or related field and 6 years of experience in Information Technology with roles leading up to the following knowledge skills and abilities referenced above.
- 3 years of experience in a supervisory or lead role leading multiple staff and teams.
- Ability to efficiently use a personal computer and applicable software to successfully perform the essential functions of the position.
- Ability to read and write English language.
Preferred Qualifications:
- 5 or more years of supervisory or lead leadership experience.
- The Open Group Architecture Framework (TOGAF)
- Certified Agile Developer (CAD)
- Certified Quality Manager or Certified Quality Engineer
- Certified Six Sigma/Lean Green, Orange, or Black Belt
- Certification in Risk and Information Systems Control (CRISC)
- Certified Information Systems Security Professional (CISSP)
PLEASE READ: If you have gotten this far and are thinking you do not qualify, consider again. Studies have shown that members of historically marginalized and underrepresented communities, specifically women and people of color, are less likely to apply to jobs unless they clearly meet every single qualification. At the Office of the Secretary of State, we are dedicated to building a diverse and authentic work force with a foundation of belonging. If you are excited about this role and have relevant experience and skills, but question whether your experience aligns perfectly with every qualification in the job description, we encourage you to apply regardless. You may just be the ideal candidate this office needs.- 10 years of experience in Information Technology with roles leading up to the following knowledge skills and abilities:
Supplemental Information
Working Conditions
The role necessitates an individual who can function effectively both independently and as part of a team. It demands the ability to excel under pressure in order to meet stringent deadlines. The candidate must demonstrate adaptability within the rapidly evolving realm of web development, particularly with regards to website security. Thoroughness and precision in task execution are paramount, as is the capability to manage multiple tasks concurrently. Proficiency in interpersonal and communication skills, directed towards both internal and external stakeholders, is a fundamental requirement. The standard work hours are Monday through Friday, from 8 am to 5 pm. However, there is an expectation of availability beyond these hours, including evenings, weekends, and holidays, particularly during unforeseen emergencies. The role includes the physical ability to handle objects weighing up to 50 lbs, with or without reasonable accommodation. Additionally, readiness to travel to different office locations within the state on short notice is essential. The work environment is predominantly office-based, involving prolonged periods of sitting and extensive utilization of the keyboard. Remote work is allowed per office policy; however, you must be in the office full time for the six-month trial services/probationary period and three days in person (50% of time) after that.
Special Requirements- This position is in a bargaining unit represented by the Washington Federation of State Employees (WFSE) and is subject to the terms of the Collective Bargaining Agreement between the State of Washington, The Office of the Secretary of State, and the WFSE.
- Prior to a new hire, a background check including criminal record history will be conducted. Information from the background check will not necessarily preclude employment but will be considered in determining the applicant’s suitability and competence to perform in the position.
- Required: To be considered for this position you must attach the following:
- Letter of interest describing how your experience and qualifications relate to the duties and qualifications of the position.
- Current resume
- Three Professional references. Personal references will not be considered.
- You must complete the supplemental questions at the end of this application. Incomplete responses such as "see resume" will not be considered.
- All veterans must include a copy of your DD214 to receive preference in the hiring process. You must black out your social security number before attaching it to your application.
- Candidates who are offered a job with OSOS must possess work authorization that does not require sponsorship by the employer for a visa now or in the future.
- OSOS complies with the employment eligibility verification requirements of the federal government eligibility verification I-9 form. The selected candidate must be able to provide proof of identity and eligibility to work in the United States consistent with the requirements of that form.
- OSOS does not participate in the E-Verify program and therefore cannot support STEM OPT Extensions.