Security Analyst

About the Role

Our Client is seeking a dedicated Security Analyst to join their cybersecurity team in Columbus, Ohio. In this role, you will conduct comprehensive risk assessments for new software acquisitions and renewals, ensuring that all solutions meet the state’s stringent security standards. You will collaborate closely with procurement, IT, and business units to document findings, recommend mitigations, and integrate risk data into the organization’s governance platforms. The position offers a hybrid work schedule, with onsite presence every third day, allowing you to balance field collaboration with remote productivity. Your contributions will directly support the state’s mission to protect critical infrastructure and safeguard sensitive information.

Key Responsibilities

• Perform cybersecurity risk assessments for software procurement and renewal projects.
• Enter and manage risk assessment data in OneTrust and ServiceNow.
• Provide detailed comments and documentation for Ohio Buys requisitions as required.
• Collaborate with business units, procurement, and IT groups to clarify requirements and process steps.
• Support process mapping and improvement initiatives to reduce workflow duplication.
• Track and report metrics on workload, turnaround times, and resource needs.
• Develop and maintain risk assessment templates and guidelines for consistent use across projects.
• Ensure compliance with state and our client cybersecurity regulations and industry best practices.

Required Skills & Experience

• Minimum 3 years of experience conducting cybersecurity risk assessments using third‑party risk tools such as OneTrust.
• 3+ years of familiarity with IT procurement workflows and platforms, including ServiceNow and Ohio Buys.
• Strong documentation and communication skills, with a proven ability to produce clear, actionable reports.
• Demonstrated ability to work collaboratively across departments and manage multiple concurrent requests.
• Adaptability to rapidly changing processes and the ability to iterate solutions as new requirements emerge.
• Bachelor’s degree in Information Security, Computer Science, or a related field (preferred).

Tools & Technologies

• OneTrust – risk assessment and compliance management platform.
• ServiceNow – IT service management and workflow automation.
• Ohio Buys – state procurement portal.
• Microsoft Office Suite – for documentation, reporting, and presentations.
• Risk assessment frameworks (e.g., NIST, ISO 27001) – applied to evaluate software security posture.

Work Schedule & Duration

• Contract length: October 26, 2026 – June 30, 2027.
• Hybrid work arrangement: onsite at 1970 West Broad Street, Columbus, Ohio every third day; remote work on remaining days.
• Full onsite interviews required at the Shipley building.

Interview Process

The selection process begins with an initial screening call, followed by a technical interview focused on risk assessment methodology and tool proficiency. Successful candidates will then attend a full onsite interview at the Shipley building, where they will meet with the cybersecurity team and key stakeholders to discuss real‑world scenarios and assess fit.

Position Details

• Employment Type: Contract
• Duration: Approximately 12 months (with potential for extension)
• Work Authorization: Must be authorized to work in the United States