IT Security Analyst 1(ITSA1)

Judge Group, Inc.; Columbus (OH); On-site; USD 48,000 - 52,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Job summary

Judge Group, Inc. is seeking an IT Security Analyst Consultant to support software procurement and renewal processes through cybersecurity risk assessments, third-party risk management, and workflow coordination in Columbus, Ohio.

This role partners with procurement, IT, security, and business stakeholders to evaluate software-related risks, document outcomes, and drive process improvements in a fast-paced environment where processes evolve.

Qualifications

• Bachelor's degree or equivalent in IT, cybersecurity, or related field.
• At least 3 years in cybersecurity risk assessments or third-party risk management.
• Experience with governance, risk, and compliance platforms (e.g., OneTrust).
• Experience supporting IT procurement workflows and vendor onboarding.

Responsibilities

• Conduct cybersecurity and third-party risk assessments for software procurements and renewals.
• Document findings and recommendations using risk management platforms.
• Maintain records and ensure timely risk review activities.
• Collaborate with procurement, IT, security, legal, and business stakeholders.
• Support procurement workflows with risk guidance and documentation.
• Monitor pipelines, manage multiple requests, and meet deadlines.
• Assist in process mapping and workflow optimization.
• Track KPIs such as assessment volumes and turnaround times.

Skills

Cybersecurity risk assessments

Vendor risk management

GRC platforms (OneTrust)

ServiceNow

Written and verbal communication

Analytical thinking

Education

Bachelor's degree in IT / Cybersecurity / Business / Supply Chain

Tools

OneTrust

ServiceNow

Job description

Location: Columbus, OH Salary: $35.00 USD Hourly – $38.00 USD Hourly Description:

Job Summary

We are seeking an IT Security Analyst Consultant to support software procurement and renewal processes through cybersecurity risk assessments, third-party risk management, and workflow coordination. This role partners with procurement, IT, security, and business stakeholders to evaluate software-related risks, document assessment outcomes, and drive process improvements. The ideal candidate is highly organized, detail-oriented, and comfortable working in a dynamic environment where processes and priorities may evolve.

Key Responsibilities

• Conduct cybersecurity and third-party risk assessments for new software acquisitions, contract renewals, and technology-related procurement requests.
• Document assessment findings, recommendations, and risk decisions using risk management and governance platforms.
• Maintain accurate records and ensure timely completion of risk review activities.
• Collaborate with procurement, information technology, security, legal, and business stakeholders to gather required information and facilitate risk evaluations.
• Support procurement workflows by providing risk-related guidance, comments, and documentation throughout the request lifecycle.
• Monitor assessment pipelines, prioritize workload, and manage multiple requests simultaneously while meeting established timelines.
• Assist in process mapping, workflow optimization, and continuous improvement initiatives to enhance operational efficiency and reduce duplication of effort.
• Track and report key performance metrics, including assessment volumes, turnaround times, workload trends, and resource requirements.
• Communicate risk findings and recommendations clearly to both technical and non-technical audiences.
• Adapt quickly to changing business requirements, policies, and operational processes.

Required Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Business Administration, Supply Chain Management, or a related field; equivalent professional experience may be considered.
• Minimum 3 years of experience conducting cybersecurity risk assessments, vendor risk reviews, or third-party risk management activities.
• Minimum 3 years of experience using cybersecurity governance, risk, and compliance (GRC) or third-party risk management platforms (e.g., OneTrust).
• Minimum 3 years of experience supporting IT procurement processes, vendor onboarding, contract renewals, or related workflows.
• Experience working with enterprise workflow and service management platforms such as ServiceNow.
• Strong written and verbal communication skills with the ability to create clear documentation and present findings effectively.
• Demonstrated ability to work collaboratively across multiple departments and manage competing priorities.
• Strong analytical, organizational, and problem-solving skills.
• Ability to perform effectively in a fast-paced environment with evolving processes and priorities.

Preferred Qualifications

• Experience with supplier risk management, vendor governance, or procurement operations.
• Knowledge of cybersecurity frameworks, risk management methodologies, and compliance requirements.
• Experience supporting process improvement, workflow automation, or business process analysis initiatives.
• Familiarity with metrics reporting, dashboard development, or operational performance tracking.

Medical, dental, and vision insurance are available to qualified candidates who meet eligibility requirements.